Self-taught systems builder and independent security researcher based in South Africa. Operating with formal schooling up to Grade 6, I taught myself HTML, CSS, JavaScript, Python, and C++ via Udemy. But I haven't just kept building — I build better today by instructing and working alongside AI as a production partner. I excel at finding logic flaws in complex infrastructure, probing boundary perimeters, WAF rules, and cryptographic implementations. I coined the AGIA framework in 2026 to name a class of builder that already existed but had no word: someone who combines human general intelligence with AI intelligence to build real production systems and conduct security research solo.
Active independent security researcher focusing on complex infrastructure logic flaws, network perimeter bypasses, and access control subversion. I am most active on HackerOne, alongside maintaining profiles on Google Bug Hunters, Bugcrowd, and YesWeHack. My core strength lies in analyzing edge-case logic and protocol de-synchronization.
WAF Bypass & Origin Probing: Identified a critical path normalization de-synchronization (%2e) vulnerability on an enterprise Web Application Firewall protecting a major cryptocurrency exchange. Established an unauthenticated WebSocket connection that bypassed edge security entirely, allowing direct interaction with the Origin Logic Layer to extract internal financial ledger errors.
mTLS Service Isolation Flaw: Uncovered a broken mutual TLS (mTLS) architecture within a major blockchain network. Demonstrated that backend RPC listeners failed to validate service-scoped certificates, allowing any process holding any valid network certificate to terminate core data layers and bypass intended identity boundaries.
Cryptographic Discovery: Awarded a discretionary bounty by a global payment processor for identifying an exposed internal RSA private/public cryptographic key pair within their public Git commit history. Delivered a deep impact analysis proving systemic infrastructure risk, overriding a prior generic duplicate filing.
Anthropic CVP: Forge Vertical holds active Anthropic Cyber Verification Programme approval (Ref: TS-01a047e2 · Org: d1777766-4575-45c3-8c7c-3e865c51c941). This allows expanded access to Claude models for dual-use cybersecurity research and adversarial simulations within formal safe harbour agreements.
In September 2026 I published the AGIA framework on Forge Vertical — defining an emerging class of builder that already existed but had no name. An AGIA is someone who combines human general intelligence with AI intelligence to architect, direct, and deliver production-grade infrastructure, security research, and complex systems solo — without writing code in the traditional sense, but understanding every layer well enough to own the outcome.
The five requirements: paid security research findings, paid production builds, meaningful tools beyond SaaS, professional conduct (not a social media troll), and a deep AI communication discipline that goes beyond prompting. One on its own is not the same — human general intelligence without AI is slow, AI without human judgment produces outputs nobody can be accountable for. The combination, applied correctly, is something else entirely.
Self-taught. No computer science degree — formal primary schooling up to Grade 6, followed by a path through collision repair training, teaching English in China (TQUK Level 5 TEFL, 2017/2018), and working as a safety crew member on Fear Factor India productions in Cape Town. I taught myself HTML, CSS, JavaScript, Python, and C++ via Udemy, and now build faster and better by working alongside AI as a daily production partner.
I founded Prinymity in 2018 focusing on custom PC builds and privacy-focused web presence. That evolved into Forge Vertical as I moved deeper into software engineering, security research, and AI-native development. Today I build distributed systems as a solo operator — constantly iterating to match the speed of frontier technology.