● Web VAPT
A structured 6-month web and API pentesting roadmap, underway since July 2026 — PortSwigger Web Security Academy first, then OWASP API Top 10, then bug bounty writeups, then certification prep.
● Status
Actively in progress, not yet at the point of documented findings. Running a parallel SOC-focused learning track alongside it — Splunk, Windows Event Log analysis, and MITRE ATT&CK — with the intent of using offensive background as a differentiator on the defensive side too.
● Explore
The Network Security lab has real findings written up if you want to see the format this will follow.
Back to Labs