Skip to content
View HarshdeepAthawale's full-sized avatar
37 followers · 75 following

Achievements

Achievement: Pull Sharkx2Achievement: Quickdraw

Achievements

Achievement: Pull Sharkx2Achievement: Quickdraw

Highlights

  • Pro

Block or report HarshdeepAthawale

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
HarshdeepAthawale/README.md

Hi, I'm Harshdeep Athawale

Security Engineer & Researcher: offensive security, AI platform security, and WAF engineering.

3rd-year CS @ TIET · Open to Security Intern roles for 2027

Vulnerability Research

35+ HackerOne reports to programs including Netflix, Goldman Sachs, Adobe, NVIDIA, Red Bull, and Coca-Cola.

  • Critical (CVSS 9.1): GraphQL flaw exposing employee PII, Red Bull
  • High (CVSS 8.6): Authentication bypass, Netflix Law Enforcement Portal
  • Critical: Unauthenticated API with production database write access, Coca-Cola
  • High (CVSS 7.5): Subdomain takeover, NVIDIA & Anduril

Security Engineering

Secured an agentic AI platform. I built the sandboxing and tenant isolation for untrusted code execution at 5K+ concurrent users.

Pinned Loading

  1. Deepfake-Detection-Authenticity-Verification-System Deepfake-Detection-Authenticity-Verification-System Public

    TypeScript

  2. Transformer-based-end-to-end-Web-Application-Firewall-WAF-pipeline Transformer-based-end-to-end-Web-Application-Firewall-WAF-pipeline Public

    transformer waf goes brrrrrr

    Python

  3. websecurity-fun websecurity-fun Public

    2