Amal PK.
Application Security Analyst; freelance VAPT, web, mobile & API pentesting, and source code review.
Kerala, India · Available for freelance engagements
Services
Web Application Pentesting
Manual testing focused on access control, authentication, and business logic - the flaws scanners consistently miss. Findings come with clear reproduction steps and severity.
API & Mobile Pentesting
Security testing for REST and GraphQL APIs and Android/iOS applications. Covers authentication, authorization, object-level access, and sensitive data exposure.
Source Code Review
Reviewing application source to find vulnerabilities at their origin. Useful where black-box testing can't reach, and to confirm the root cause behind a finding.
VAPT & Advisory
End-to-end vulnerability assessment with prioritized, reproducible findings. Includes remediation guidance and retesting once fixes are in place.
Recognition
Responsible disclosure of security vulnerabilities, acknowledged by the following organizations.
Certifications
Hack The Box - Pro Labs: Dante, P.O.O
Writeups
Experience
HackIT Technology & Advisory Services - Security Analyst (VAPT)
Web, API, and mobile application pentesting across black, grey, and white box engagements. Own client engagements end to end - scoping, communication, and reporting - delivering findings with severity, reproduction steps, and remediation guidance
HackIT Technology & Advisory Services - Security Analyst Intern (VAPT)
Hands-on application security testing and reporting.
Information Security Research Association - Chapter Coordinator
Lead chapter operations and coordinate cybersecurity initiatives across the Kochi community. Organize workshops, seminars, and CTF events for students and security professionals.
About
I'm Amal, an application security analyst focused on web, mobile, and API security. I find the vulnerabilities that actually matter, explain them clearly, and help engineers fix them - whether that's through my day-to-day work or freelance engagements.
I work hands-on and stay close to the research, sharpening through CTFs and ongoing study. For freelance clients that means thorough, manual testing and reporting you can actually act on - not just a scanner dump.