Security Research Notes

Practical notes and testing ideas.

Notes on bug bounty, recon, testing, and the habits that make research better. Written from my own work.

What this blog will cover.

Short and practical, written from my own testing.

Bug bounty tips

Short, practical posts on recon, triage, validation, and reporting.

Research notes

Thoughts, lessons learned, testing patterns, and workflow improvements.

Workflow

How I organize notes, tooling, and AI assistance around real testing.

Latest posts.

One article for now, on building a research system around AI assistance instead of starting from zero every session.

Build a System, Not Just a Session

On using AI assistants as part of a real research system, with digests, maintenance reviews, browser evidence, source review discipline, notes, and a record of what failed.

Read the article →