Pushpak Pawar

Excited to share that I am now a Burp Champion with @PortSwigger @Burp_Suite ! 🎉 Looking forward to contributing more to the AppSec and bug bounty community. #BurpChampion #BurpSuite #PortSwigger #AppSec

Hey @sumgr0 👀 is that you in the background of this scene or am I seeing things? 😅

Another question that really bothers me: If something is a duplicate, why does it take almost 3 months to say that? Should this not be identified during the triage stage itself? #BugBounty #Infosec #SecurityResearch #Intigriti

Then after months of silence, suddenly the report was marked Duplicate. But if this was truly a duplicate… why was the issue reproduced and forwarded to the company in the first place? #BugBounty #Infosec #EthicalHacking #Intigriti

This made me wonder: What is the role of mediation support if researchers are still left alone when companies do not respond? Is support really supporting researchers in situations like this? #BugBounty #ResponsibleDisclosure #Infosec #Intigriti

So I contacted mediation/support hoping they could help move the report forward. But the answer I received was basically: “Ask the company in the report chat.” But the company was already not responding for months. #BugBounty #Infosec #SecurityResearch #Intigriti

I kept asking politely for updates. Still no reply from the company for months. Researchers report vulnerabilities to help companies improve security. But here it felt like the researcher was simply ignored. #BugBounty #EthicalHacker #Infosec #Intigriti

After that… complete silence. The report stayed pending for months, and the company never responded in the report chat. Not once. Is this professional behavior for a bug bounty program? #BugBounty #Infosec #SecurityResearch #Intigriti

On 20 Jan 2026, the triage team reproduced the issue and confirmed it. They told me they would forward the report to the company for review. At that moment I felt my work was validated. #BugBounty #ResponsibleDisclosure #Infosec #Intigriti

On 16 Jan 2026, I reported a vulnerability in a private program. The possible bounty was up to €1600, so I spent real time researching, verifying the issue, and responsibly submitting the report. #BugBounty #EthicalHacking #Infosec #Intigriti

Met a great person today and learned so much from him about bug bounty hunting, malware research, and real-world security issues. Respect for the depth of knowledge and experience. Always learning, always growing. @mcipekci

StartUp India is a powerful platform that connects diverse sectors with new opportunities. #10YearsOfStartupIndia

Had a great conversation with Jayson E-Street. He teaches how to hack humans… and I ended up getting hacked myself 😄🧠🔓 @jaysonstreet #HumanHacking #CyberSecurity #DEFCON #InfoSec #HackerLife

@grok @grok tell me when I can see myself in this list. Is this possible with my current skill set?

All-time bug bounty rankings are tricky as platforms track differently (e.g., earnings, reputation), and full data isn't always public. Based on combined historical data from HackerOne, Bugcrowd, and reports up to 2026, here's a top 10 by estimated impact/earnings: 1. Cosmin Iordache (19h4ck3r) - ~$2M+ 2. Santiago Lopez (try_to_hack) - First to $1M 3. Tommy DeVoss (dawgyg) 4. Mark Litchfield 5. Ron Chan (ngalongc) 6. Nathaniel Wakelam (hakluke) 7. Frans Rosén (fransrosen) 8. Sam Curry (samwcyo) 9. Jobert Abma (jobertabma) 10. Ben Sadeghipour (nahamsec) Check platforms for latest!

Hey @grok who are the top 10 bug bounty hunters in the world right now?

@grok @grok who are the top 10 all time ?

Bug bounty rankings vary by platform and metrics like earnings or reputation. As of January 2026, here's a combined top 10 from HackerOne, Bugcrowd, and Google VRP leaderboards: 1. m0chan (HackerOne) 2. Seunghyun Lee (Google) 3. d0xing (Bugcrowd) 4. godiego (HackerOne) 5. Aman Pandey (Google) 6. HolyBugx (Bugcrowd/HackerOne) 7. yash_005 (HackerOne) 8. Tomasz Bojarski (Google) 9. brutuspt (Bugcrowd) 10. ele7enxxh (Google) For details, check the platforms directly!

Strong reports start with honest titles 👏

Modern bug bounty hunting is no longer about running random tools. It’s about methodology, automation, and real impact. 🧠 Recon → Exploitation → Report 🔍 XSS · IDOR · SSRF · Nmap · Subfinder Read the full: x.com/NullSecurityX/… #BugBounty #CyberSecurity

Congratulations guys 👏 Really happy to see this go live. Wishing the team all the best 🚀

We are live. Today marks the launch of HexaSentra an offensive security & penetration testing firm built by security researchers. Real attack simulation. Human-led testing. Actionable security outcomes. 🌐 hexasentra.com #CyberSecurity #PenTesting #OffensiveSecurity