Hi, I'm MILAN

Web Developer | Bug Hunter | Security Researcher

View Resume Hire Me

About me

Milan - Security Researcher

I'm a Security Researcher and Penetration Tester with hands-on experience in web development, focused on bug hunting and securing modern web applications.

When not coding or hunting vulnerabilities on platforms like HackerOne and Intigriti, I document security research, contribute to open-source security tools, and continuously explore emerging cybersecurity trends to strengthen real-world defenses.

Core Competencies
Frontend Development 90%
Web Security 80%
Penetration Testing 75%
Let's Collaborate

Professional Profile

Technical expertise applied through hands-on experience in web development and cybersecurity

Frontend Development

Freelance & Contract Work

2023 - Present

Building responsive, secure web applications with focus on performance optimization and security-first development practices.

Core Technologies
HTML5/CSS3 JavaScript React.js Bootstrap Responsive Design Security

Security Research

Bug Hunting & Analysis

2024 - Present

Identifying and responsibly disclosing web vulnerabilities through systematic research and manual testing techniques.

Platforms & Methods
HackerOne Intigriti Bugcrowd Manual Testing Vulnerability Research Reporting

Penetration Testing

Security Assessment

2025 - Present

Conducting security assessments following OWASP standards with focus on risk analysis and remediation guidance.

Testing Expertise
Web Security API Testing OWASP Top 10 Risk Analysis Assessment Remediation

Security Writing

Technical Documentation

2025 - Present

Creating detailed vulnerability reports and educational content to advance cybersecurity awareness and knowledge sharing.

Content Skills
Technical Writing Bug Reports Documentation Educational Content Research Community

Each role demonstrates practical application of technical skills to deliver measurable security outcomes.

Contact Me View Blog

Security Methodologies

Professional security assessment approach based on OWASP and industry standards

01

Reconnaissance

Gathering intelligence about target systems, identifying attack surfaces, and mapping the application structure.

OSINT Subdomain Enumeration Technology Stack
02

Vulnerability Analysis

Identifying security weaknesses through automated scanning and manual testing techniques.

Automated Scanning Manual Testing Configuration Review
03

Exploitation

Responsibly exploiting identified vulnerabilities to validate impact and demonstrate business risk.

Proof of Concept Impact Validation Risk Assessment
04

Post-Exploitation

Assessing the extent of access gained and identifying potential lateral movement opportunities.

Access Assessment Data Exposure Impact Scope
05

Reporting

Documenting findings with clear technical details, risk ratings, and actionable remediation steps.

Technical Reports Executive Summary Remediation Guide
06

Remediation Testing

Verifying that security vulnerabilities have been properly addressed and validated after fixes.

Validation Testing Patch Verification Compliance Check

OWASP Top 10 Focus

A01 A02 A03 A04 A05 A06 A07 A08 A09 A10

Comprehensive testing against OWASP Top 10 vulnerabilities with emphasis on business impact

Projects

A selection of my recent work in development and security

Advanced Calculator App
View Project
Advanced Calculator App

A fully functional calculator with advanced features including scientific operations and a clean, responsive UI.

HTML5 CSS3 JavaScript
Interactive Chess Game
View Project
Interactive Chess Game

A fully playable chess game with move validation, check detection, and a clean intuitive interface.

HTML5 CSS3 JavaScript
Phishing Link Detector
View Project
Phishing Link Detector

Real-time phishing detection tool that analyzes URLs for suspicious patterns, malicious indicators, and security threats.

JavaScript Security URL Analysis Real-time
Password Strength Checker
View Project
Password Strength Checker

Real-time password strength analyzer that estimates crack time using GPU-speed & character-set detection.

JavaScript Entropy Brute-force
Port Scanner
View Project
True-Open Port Detection

Live port scanner that tests 20+ network ports and detects open services in real-time.

Network Security Port Detection Service Discovery
Web Vulnerability Scanner
View Project
Web Vulnerability Scanner

A custom web application scanner that detects common security vulnerabilities like XSS, SQLi, and CSRF.

Python Security Automation

Certifications

Professional certifications that validate my expertise

1768881769879
Advanced Web Development

Sololearn

View Details
Milan Gautam
Cyber Security Fundamentals

Cybrary

View Details
PenTest+ Certificate
CompTIA PenTest+

CompTIA

View Details

Security Metrics

0 Reports Submitted
0 Vulnerabilities Found
0 Years Experience
0 Programs Contributed
Industry Recognition

Trusted by Security Platforms

Acknowledged for professional security research and responsible disclosure practices across leading platforms.

HackerOne

Top Researcher

Recognized for multiple critical vulnerability discoveries with detailed technical reports across enterprise programs.

2
Valid Reports
50%
Acceptance Rate
$0K+
Bounties Earned
Critical Bug Discovery Priority Triage Enterprise Access
View Profile

Intigriti

Trusted Expert

Acknowledged for consistent, high-quality security findings with professional collaboration across private programs.

1
Accepted Reports
100%
Acceptance Rate<
$0K+
Bounties Earned
Private Programs Technical Reports Professional Comm.
View Profile

Bugcrowd

Active Contributor

Contributing to security research programs with focus on web application vulnerabilities and API security testing.

0+
Valid Reports
0%
Acceptance Rate<
$0K+
Bounties Earned
Web Security API Testing OWASP Top 10
View Profile

Building trust through responsible security research and professional collaboration.

Committed to making the digital ecosystem safer through detailed disclosure and ethical practices.

Security Blog

Weekly insights on bug bounty findings, penetration testing techniques, and security research

Showing 6 of 0 articles • New article every Saturday

What My Clients Say

Get In Touch

Have a project in mind or need security advice? Let's talk!

Contact Information

  • gautammilan2024@gmail.com
  • +977 (980) 75-51724
  • Kathmandu, Nepal
  • Intigriti: milang@intigriti.me

Message Sent Successfully!

Thank you for reaching out. I'll get back to you as soon as possible.