SunnyKumar Jonwal
$ cybersecurity analyst
I build software and then spend my evenings finding out how it fails. Full-stack engineering by day, offensive security and bug hunting by night — the two habits sharpen each other.
0+
Years shipping code
0+
Projects delivered
0+
Vulnerabilities reported
0
Certifications held
Two disciplines, one toolkit
All services →01
Build
Product engineering end to end — React front ends, typed APIs, and the boring infrastructure that keeps them up at 3am.
02
Break
Penetration testing and adversarial review of web apps, APIs and cloud accounts. Findings you can actually act on.
03
Harden
Threat modelling, secure code review and CI pipelines that fail the build before an attacker gets a turn.
Selected work
All projects →Wazuh SIEM Integration
A continuous attack-surface monitor. Checking Day To Day Logs. Actively Monitoring Login Activity, System, Application And Day To Day Checking And Implement Automation Script With AI Integration
SIEM · Monitoring · Logs Analysis
AWELO Foundation
Re-Build An Organization Website That Can Empowered women empower the world. I Also Implement The Payment Integration Setup Like Stripe, Paypal.
TypeScript · Next.js · Stripe · Prisma
Latest articles
All articles →543,000 valid credentials sat in public GitHub repos. Check yours
A new study found over 543,000 working credentials in public GitHub repositories, with a median exposure of 784 days. Here's what the…
Reflection's Beam and open-weight models: what builders should check
Reflection AI unveiled Beam, a 501-billion-parameter open-weight model it says matches leading Chinese open models at a fraction of the…
Google says AI is speeding up vulnerability discovery. Here's what that means
Google's threat intelligence team reports that monthly vulnerability disclosures doubled in 2026 and exploitation rose sharply, with…
Claude Sonnet 5.5: what's new, and how to test it on your own work
Anthropic released Claude Sonnet 5.5 with faster responses and lower typical task costs at the same per-token price. Here's what was…
Security roundup: Cisco, SharePoint, Apache, and OpenSSL fixes to apply
A busy week of fixes. Cisco SD-WAN Manager and SharePoint are being exploited, Apache HTTP Server and OpenSSL shipped patches, and…
Citrix NetScaler zero-days: what happened and what to do now
Two critical NetScaler flaws were exploited before patches existed, and some admins were told to switch their appliances off over a weekend.…