Gouthaman G

Gouthaman G is a final-year B.Tech Cyber Security student at Amrita Vishwa Vidyapeetham, Coimbatore, graduating in 2027 with a 7.5 CGPA, who specializes in Application Security and API Vulnerability Assessment. They focus on building custom security tooling like automated scanners for multi-role differential replays and schema-aware zero-trust proxies. Their work targets OWASP Top 10 and OWASP API Security Top 10 vulnerabilities including BOLA, broken authentication, and GraphQL misconfigurations.

The primary services offered include Vulnerability Assessment & Penetration Testing (VAPT) with a specialization in API security and practical engagement with the OWASP API Top 10. They build custom tools such as scanners and schema-aware gateways to detect issues like BOLA, broken authentication, and GraphQL misconfigurations.

Gouthaman G has completed 55+ PortSwigger Academy Labs, demonstrating hands-on experience with modern web security challenges. This practical foundation is reinforced by active bug bounty recon on Intigriti, specifically focusing on API and IDOR vulnerabilities.

The technology stack includes Python, TypeScript, FastAPI, and React, which are used to build the custom security tooling mentioned. These languages support the development of automated scanners and schema-aware gateways for API security testing.

The custom tools include an automated scanner named 'aegis-scanner' that performs multi-tenant differential testing against REST and GraphQL protocols. Another tool, 'aegis-security-engine', is designed for active-differential tri-request BOLA and GraphQL AST analysis.

The business targets clients who need specialized API security testing beyond traditional DAST scanners, particularly those dealing with multi-tenant state and role boundaries. They are looking for full-time opportunities, internships, and research collaborations in Application Security, API Penetration Testing, and Product Security.

The business is located in Tiruchirappalli & Coimbatore, India, which may imply lower overhead costs for startups or academic collaborations compared to major metropolitan hubs. This regional focus could be a deciding factor for companies seeking local expertise in the southern Indian tech corridor.

The business emphasizes building secure software through understanding access control mechanics, specifically mentioning multi-tenant state and schema-level zero trust. They aim to secure modern applications by analyzing the mechanics of access control rather than just running commercial scanners.

The business mentions holding the Certified API Security Analyst (CASA) credential from APIsec University, which validates their expertise in API security. This certification is relevant for professionals working with modern APIs and access control mechanisms.

You can reach Gouthaman G by phone at +918675115970.

The official website of Gouthaman G is gouthaman.me.

Gouthaman G has no reviews on Trustburn yet. Anyone who has used it can write the first review on its Trustburn page.