About

What’s the Story Behind the Name ‘Frogy’?

During an epic gaming session in the hot, muggy Indian nights of my engineering days, I pulled off some of the most amazing jump shots my teammates had ever seen in Counter-Strike. Against all odds, I landed these leaps perfectly, and my teammates started calling me “Frog” for my jumping skills.

The name stuck, but it also held a playful connection to a family joke my mom used to make about me “jumping from one thing to another,” especially during study sessions. Over time, ‘Frogy’ became a badge of honor, symbolizing my dynamic energy, both in gaming and later in cybersecurity.

Who am I?

I have worked in cybersecurity since 2011. The first nine years were hands-on offensive work: penetration testing and red teaming for consulting firms in India and New Zealand. In 2020 I moved to product companies, where I have built and led vulnerability management, cyber threat intelligence and detection engineering teams. Today I am Threat Detection Manager at ION Group.

I never left the offensive side. Outside my day job I do bug bounty, build open-source tools and keep a personal learning portfolio, which you can see across this site.

Core Competencies

Risk-Based Vulnerability Management
Penetration Testing & Red Teaming
Attack Surface Management
Cyber Threat Intelligence
Detection Engineering (SIEM/Threat Hunting)

My Journey (Timeline)

2011 - India - Started as Security Analyst/Engineer in SMEs
2014 - UK - Completed MSc in Computer Security & Forensics
2014 - Norway - Co-trained at HackCon: Mobile Application Hacking
2016 - India - Discovered CVE-2016-7786 (Sophos UTM)
2017 - New Zealand - Joined KPMG as Cybersecurity Manager
2018 - Thailand - Participated in APAC Hacknet Conference in Bangkok
2020 - New Zealand - Discovered CVE-2020-35387 (EDT Web Application)
2020 - UK - Certified Threat Intelligence Analyst (CTIA)
2020 - UK - Certified CrowdStrike Falcon Hunter (CCFH)
2020 - UK - Became Security Engineering Manager at Tesco
2021 - UK - Published Course on Attack Surface Analysis (EC-Council)
2022 - UK - Technical Reviewer: Resilient Cybersecurity (Packt)
2022 - UK - Joined TikTok as Global Senior Vulnerability Management Analyst
2022 - USA - Visited USA for 3 weeks on a TikTok project
2023 - UK - Began role as Threat & Vulnerability Manager at M&S
2024 - UK - Panel discussion at Qualys EMEA 2024
2025 - UK - Began role as Cyber Threat Detection Manager at GKN Automotive
2025 - USA - Presented my open-source attack surface management toolkit at Black Hat USA 2025 Arsenal
2026 - UK - Began role as Threat Detection Manager at ION Group (fintech)

Education

MSc – Computer Security & Forensics, University of Bedfordshire, UK
B.Tech – Computer Engineering, Gandhinagar Institute of Technology, India

Certifications

OSCP, CEH, CTIA, CCFH, CCFA, SANS MGT516

Recognition & Other Highlights

Presented at Black Hat USA 2025 Arsenal: my open-source external attack surface management toolkit
Panel discussion, Qualys EMEA 2024
Technical reviewer of Resilient Cybersecurity (Packt Publication)
Authored a course for EC-Council on Applied Attack Surface Analysis and Reduction
Board of Advisors, Cyber Peace Foundation
Co-trainer, Mobile Application Hacking and Security at HackCon, Norwegian Cybersecurity Conference
Discovered CVE-2016-7786 (Sophos UTM) & CVE-2020-35387 (EDT Web Application)
Recognized in multiple Bug-Bounty programs

Thank you for taking the time to know more about me. Feel free to connect on LinkedIn or GitHub.