API Breach Prevented in Fintech App

How a ₹10 Lakh data breach was stopped by catching an IDOR vulnerability in production.

XSS in EdTech Platform

Critical stored XSS in student profiles fixed to prevent data theft and credential stealing.

Privilege escalation vulnerability allowed unauthorized access — fixed with role-based checks.

Flawed OAuth flows exposed patient records — fixed with secure token verification.

SSRF vulnerability let attackers fetch internal URLs — mitigated with strict validations.

Cross-site request forgery found in fund transfer form — resolved with token validation.

Predictable transaction IDs exposed data — patched to check authorization properly.

Critical SQL injection in search query exposed sensitive user orders — blocked with input sanitization.

A healthcare management platform storing medical records, prescriptions, and reports for a comprehensive API VAPT.