I'm Rakesh Mali — a Security Researcher and Penetration Tester with over 5 years of experience in ethical hacking. I currently serve as a Penetration Testing Staff Engineer at SonicWall, conducting advanced security testing and providing remediation strategies for enterprise network and cloud environments.
Previously at Fortinet, I worked as a Security Researcher performing Web, Mobile, Network, and API penetration testing — with hands-on experience in FortiDAST, external network pentests, REST API reviews, zero-day exploit PoC development in Python, and fuzzer/crawler research.
Beyond my corporate roles, I am an independent security researcher actively hunting bugs on HackerOne, Bugcrowd, and other platforms — responsibly disclosing critical vulnerabilities including account takeovers, OTP bypasses, OAuth misconfigurations, Blind XSS, CSRF exploits, and access token leakage.
I hold OSCP and CRTP certifications, and am also working on a short film focused on hacking and scams to help educate the public about cybersecurity risks.
Whether it's a pentest engagement, security research collaboration, or bug bounty discussion — I'd love to hear from you.