Application Security Professional
Achuth V P
Focused on application security.
Application security professional with experience in manual and automated security assessments across the SDLC—secure design review, threat modeling, secure code review, and security testing in Java, Python, JavaScript, and Go stacks. Builds security automation to identify and mitigate issues at scale and partners with engineering on secure development. Background in first-party security research with 15+ critical findings, five CVEs, Google Hall of Fame recognition, and a Mozilla bug bounty.
Critical findings
CVEs assigned
Security assessments
Automation tools built
Expertise
Recognition
Highlights
Tap a card for more detail.
Writing
Latest posts
You Have RCE. Now What? Hunting Guest-to-Host Attack Paths in AI Code Interpreters
From unauthenticated AF_VSOCK listeners and writable overlays to VMM notify sockets and Firecracker host gateways.
Bypassing a 3 layer SVG sanitizer: Stored XSS in Mozilla
The bypass, the parser differential, and the missing write().