██╗ ██╗██╗███╗ ███╗ █████╗ ███╗ ██╗███████╗██╗ ██╗██╗ ██╗
██║ ██║██║████╗ ████║██╔══██╗████╗ ██║██╔════╝██║ ██║██║ ██║
███████║██║██╔████╔██║███████║██╔██╗ ██║███████╗███████║██║ ██║
██╔══██║██║██║╚██╔╝██║██╔══██║██║╚██╗██║╚════██║██╔══██║██║ ██║
██║ ██║██║██║ ╚═╝ ██║██║ ██║██║ ╚████║███████║██║ ██║╚██████╔╝
╚═╝ ╚═╝╚═╝╚═╝ ╚═╝╚═╝ ╚═╝╚═╝ ╚═══╝╚══════╝╚═╝ ╚═╝ ╚═════╝
> whoami
himanshu gupta
cybersecurity manager
prev: senior security consultant @ EY GDS
4+ yrs breaking web, api, mobile, network & cloud systems
50+ assessments · 100+ critical/high vulns · building security automation
- vulnerability management: CVE triage, prioritization and patch lifecycle across services, containers, infra & proxies
- supply-chain security: automated dependency scanning, SBOM generation, image signing, continuous upgrade pipelines (Trivy, Grype, Snyk, Dependabot)
- cloud-native hardening: GCP, Kubernetes, image hardening, secrets management, least-privilege IAM, network policy
- network security: proxies, TLS, WAFs, load balancers kept current and patched
- security reviews: threat modeling, design reviews of new services, periodic audits, OWASP Top 10
- incident response: leading response, disclosure and remediation; DR failover testing with devops
- ai-driven automation: using AI tools to make staying secure the default
pentesting & automation
- Talos MITM-based web app pentest automation. Captures real browser traffic, structures it into an attack surface, and runs auth bypass, IDOR, and access control tests automatically.
- NPA-Network-Pentest-Automation-Framework modular framework for network assessments: scope input, host detection, port scanning via nmap/rustscan
- ReconRadar bug bounty workflow automation on kali: env setup, tool management, mongodb output centralization
- nmapAutomator forked: background nmap automation script
- nmap-parse-output forked: converts and extracts data from nmap scan output
pentest management and reporting tools
- PentestPilot guide to streamlined pentest operations
- pentest_update_writer desktop app for organizing pentest updates: testcases, URLs, techniques, outcomes
ai tools
- prompter CLI tool for anthropic API: content anonymization, custom prompts, multiple input methods
side projects
- SafePass offline password manager: tkinter GUI, local mongodb, sha-256 + system keyring
- AnkiDeutsch AI-Powered German Flashcard Generator for Anki
- ChatGPT-Prompt-Queue chrome extension: queue multiple prompts, auto-send, copy conversations as markdown
- hotstar-ipl-ad-mute forked: mutes ads during hotstar live sport streams
personal
- himanshu-gupta.com personal site: built with astro