Founder
Builds the apps and runs the security tests at ElCampeon Systems. Web and API security researcher, moving deliberately into AI security.
Background
Engineering and business training, three years of hands-on security work, and apps in production.
Reports vulnerabilities through bug bounty programs on HackerOne and Bugcrowd, and through companies' own disclosure programs. Focus on access control, authentication and API authorization flaws.
Details of past findings are shared on request, within each program's disclosure rules.
Working toward Hack The Box's COAE certification.
In progressPlus an MBA in Marketing, so findings get explained in terms the business cares about.
Android learning apps, free to download and written with Claude Code. See the apps.
Security write-ups and notes at tanmaypatil.hashnode.dev.
Testing other people's apps shows how often the same flaws reach production. Building our own keeps us honest about how hard they are to avoid. ElCampeon does both on purpose, and each side makes the other better.
Say hello
See what we test and how.
See what we've built and what's coming.