skip to highlights
w3shi

security researcher · actively disclosing

S. Lakshmi Vignesh

I break things before attackers do — from low-level Intel firmware to cloud platforms and AI agents. 60+ disclosed vulnerabilities across 40+ organizations, 12 public CVEs, and a #1 global rank in Intel’s Q1 2026 researcher rankings.

Explore 12 CVEs40+ Hall of Fame orgs
Remote Code ExecutionWeb App SecurityAI SecurityAuth BypassSecurity AutomationEDR / XDR / SIEMCloud & Edge SecurityThreat IntelligenceVulnerability ManagementSupply Chain Security
01 · key metrics
#1
Globally
Intel Q1 2026 rankings
MVR 2025
Microsoft Most Valuable Researcher
#2 globally MSRC Q4 2025 · #5 Top Azure Researcher
60+
Disclosed vulnerabilities
Across 40+ top orgs
12
Public CVEs
Intel · Microsoft · NVIDIA
NASA
Letter of Recommendation
Security contributor
03 · acknowledgements matrix

Hall of Fame — 40+ organizations

Recognized by security teams and vendor programmes across tech, blockchain, cloud, developer tools and government.

Microsoft
Tech Giants
Google
Tech Giants
OpenAI
Tech Giants
Intel
Tech Giants
NVIDIA
Tech Giants
Meta Inc.
Tech Giants
PayPal
Tech Giants
IBM
Tech Giants
Consensys
Blockchain
MetaMask
Blockchain
Coinbase
Blockchain
MoonPay
Blockchain
Brave
Blockchain
AWS
Cloud/Infra
Azure
Cloud/Infra
Linux Foundation Decentralized Trust
Cloud/Infra
Kubernetes
Cloud/Infra
HackerOne
DevTools
Bugcrowd
DevTools
Mozilla
DevTools
Figma
DevTools
Autodesk
DevTools
Nextcloud
DevTools
Mattermost
DevTools
DataStax
DevTools
Doppler
DevTools
Tor Project
DevTools
Mapbox
DevTools
HubSpot
DevTools
Kiwi.com
DevTools
LinkedIn
DevTools
OKG
DevTools
Faraday Inc.
DevTools
NASA
Government
Maryland.gov
Government
*.gov.in — Government of India
Government
Tamil Nadu Government
Government

…and multiple private programmes and additional acknowledgements.

04 · work & research

Experience & security tooling

Hands-on AppSec, security automation at scale, cloud defence, and open-source supply chain research.

Apr 2026 — Present
full-time

Security Engineer

Veryon

Security tooling, AppSec, and cloud & incident-response engineering at scale.

  • Built a Playwright-based scanner that detects OWASP Top 10 vulnerabilities across web assets automatically — drove a 40% reduction in critical vulnerabilities.

  • Integrated security review into the SDLC pipeline so vulnerabilities are caught before reaching production; partnered with dev teams on remediation of critical and high-severity issues.

  • Architected API security testing strategies against OWASP Top 10 and OWASP API Security Top 10; wrote PoC exploits to demonstrate risk and accelerate patch deployment.

  • Hardened enterprise edge defences on Cloudflare — WAF rules, rate limiting, access controls, DNS security, and DDoS mitigation.

  • Ran real-time endpoint monitoring and threat response on Palo Alto Cortex XDR, triaging alerts with Unit 42 threat intelligence to cut MTTD/MTTR.

PlaywrightSDLC SecurityCloudflare WAFCortex XDRAPI Security
Aug 2025 — Mar 2026
internship

Cybersecurity Intern

Veryon

AppSec source review, SOC tooling, and vulnerability management automation.

  • Reduced critical vulnerabilities through source code review and vulnerability-reduction tooling; reported and helped remediate flaws in Veryon's web assets.

  • Monitored and triaged alerts on CrowdStrike EDR/SIEM; configured automated incident-response workflows for real-time threat detection.

  • Deployed Rapid7 InsightVM scan engines for continuous vulnerability assessment of web assets.

  • Implemented security controls in Prisma Cloud for cloud infrastructure protection and compliance monitoring; improved alert accuracy with IOC enrichment.

CrowdStrikeRapid7 InsightVMPrisma CloudIOC EnrichmentSource Review
Ongoing
open source

Enten — Open Source

Supply chain mitigation tool

Open-source tool that mitigates supply chain vulnerabilities in GitHub repositories.

  • Detects and helps remediate poisoned-artifact and dependency risks in CI/CD workflows before they reach deployment.

live demo — enten-alpha.vercel.app ↗
Supply ChainCI/CDGitHub
2025
publication

Hidden Supply Chain Attacks: Poisoned Artifacts in Continuous Deployment Workflows

Published paper — Zenodo

Research on poisoned artifacts in continuous deployment pipelines and practical mitigations for software supply chains.

doi.org/10.5281/zenodo.17618882 ↗
Supply ChainResearchCI/CD
05 · education, ctf & leadership

Foundation & community

Academic background, certifications, and community leadership in security education.

Education

B.E. Computer Science & Engineering — Cybersecurity

SRM Easwari Engineering College (Affiliated to Anna University), Chennai

cgpa 8.54 / 102022 — 2026
Certifications
  • ISC2 Certified in Cybersecurity
  • Cisco Certified — Network Basics
  • OS Challenge Winner — IITM
  • 2nd Place — IITM Cryptic Hunt
more certifications ↗
CTF & Leadership

Lead Organizer — AnzenCTF

SRM Easwari Engineering College · May 2024 — Jan 2025

  • Ran 3 CTF editions with 150+ participants and 10+ custom challenges across web exploitation, cryptography, binary exploitation, and reverse engineering.

  • Built and deployed the AnzenCTF platform for hands-on security training.

  • Collaborated with the OWASP Open Source Club to promote cybersecurity education.

  • Organized IITM Cyber Hackathon & tech events — workshops fostering community engagement in security research.

anzenctf.tech ↗