mersaCybersecurity Researcher& Bug Bounty Hunter
Who I Am
I'm mersa-v6, a cybersecurity researcher and bug bounty hunter focused on finding real security vulnerabilities in production web applications, APIs, and modern SaaS platforms.
My research covers web application security, API security, GraphQL testing, IDOR and broken access control, authentication and authorization flaws, recon, vulnerability chaining, and responsible disclosure. I work across public and private bug bounty programs on major platforms.
The work is practical and grounded — finding vulnerabilities that affect real systems, documenting them clearly, and reporting them responsibly. No overclaiming, no noise. Just reproducible findings that help security teams improve.
Research at a Glance
A high-level picture of security research activity across bug bounty and vulnerability disclosure programs.
Recognized Across Programs
Selected programs where my security research has been recognized or accepted.
Research conducted independently under each program's responsible disclosure and bug bounty terms.
Technical Skills
Core competencies applied across security research and bug bounty work.
Get In Touch
For security research, responsible disclosure, collaboration, or professional opportunities, feel free to reach out.
