About Me

I Break Into Systems. Legally.

I’m Zohaib Khattak, an offensive security researcher. I perform penetration testing, security auditing, vulnerability research, and bug bounty hunting — finding what others miss, before it becomes a headline.

Findings acknowledged across leading platforms and programs

Real-World Impact

My Real-World Impact

From bug bounties on global platforms to hands-on security assessments — here’s what I’ve delivered.

From bug bounties in global platforms to enterprise security assessments here’s what we’ve delivered.

4+ Real Engagements

Security assessments completed on real targets, including platforms from OpenAI and Silicon Labs.

2 Bug Bounties Awarded

Critical vulnerabilities I discovered and responsibly disclosed in platforms used by hundreds of millions.

48hr Average Report Delivery

Fully documented technical reports with proof-of-exploit and a remediation roadmap, delivered fast.

48hr Average Report Delivery

Fully documented technical reports with proof-of-exploit and a remediation roadmap, delivered fast.

My Principles

What I Stand For

The rules I hold myself to on every target.

I Think Like an Attacker

I simulate real-world threats so you stay one step ahead.

Zero Tolerance for False Positives

I report only what I can prove. No scanner noise, no padding — just findings that demand action.

Disclosure & Responsible Reporting

Every finding is documented with proof and disclosed responsibly.

Written for Humans

Reports that both developers and leadership can actually understand and act on.

Written for Humans

Reports that both developers and leadership can actually understand and act on.

Why Me

What Makes My Work Different

Real attackers don’t use automated scanners. Neither do I.

Without Me

Vulnerabilities stay hidden until breached

Generic scanners miss critical logic flaws

No real attacker simulation

Compliance reports with zero proof

Reactive — you find out after the damage is done

Scanner reports nobody can act on

With Me

Every vulnerability found & documented

Manual testing + real attacker techniques

Exploitation demonstrated not reported

Compliance-ready reports ISO, GDPR

Proactive — I strike before attackers do

Direct line to the researcher, start to finish

The Researcher

The Person Behind the Work

An offensive security specialist who hunts real-world vulnerabilities in global platforms.

Offensive Security Researcher — Bug Bounty Hunter | Penetration Tester. I discovered and responsibly disclosed critical vulnerabilities in OpenAI’s ChatGPT and Silicon Labs, and I’m always hunting the next one.

Founder & Lead Security Researcher

Bug Bounty Hunter | Penetration Tester | Purple Team Specialist. Discovered and responsibly disclosed critical vulnerabilities in OpenAI ChatGPT and Silicon Labs. OSCP Certified.

Your App Is a Target. Let’s Find Out What I’d Find.

Reach me on WhatsApp, email, or LinkedIn — tell me what you want tested and I’ll come back with scope and timing.