Hi, I'm Piyush Kumawat · I break things on purpose, then teach others how to find and fix them.
Hands-on write-ups, interactive checklists, roadmaps, and tools at securitycipher.com

I am a penetration tester and Staff Product Security Engineer focused on web, API, mobile, cloud, and AI/LLM security. Day to day that means real assessments, configuration reviews, and DevSecOps work - then turning the sharp edges into public guides so more people can test the same way.

I publish at securitycipher.com: practical playbooks, interactive checklists, a penetration testing roadmap, curated security tools, CVE lookup, and bug bounty write-ups.

Project	Stars	What it is
penetration-testing-roadmap		Complete roadmap to become a pentester
daily-bugbounty-writeups		Curated bug bounty write-ups to study
awsome-websecurity-checklist		Web application security testing checklist
Bug-Bounty-Resources		Handpicked tools, guides, and tips
vulnerable-code-snippet		Vulnerable vs secure code examples
guide-for-burp-suite		Beginner-friendly Burp Suite guide

• The CVE Flood Is a Lie: How to Hunt When AI Dumps 36% More Bugs But Exploitation Only Grows 10%
• RAG Poisoning in 2026: A Practical Playbook for Hacking Answers Through Your Knowledge Base
• Secrets That Pay: Hunting Valid Credentials with TruffleHog for Bug Bounties
• Software Supply Chain Security in 2026: Packages, Pipelines, and Provenance

_{Live metrics via Shields.io (no flaky third-party stats widgets).}

_{Built with care for pentesters, bug bounty hunters, and security engineers.
securitycipher.com · Services · Contact}