Sheraz Khalid

Background

About Sheraz Khalid

Cybersecurity has always been more than just a profession, it’s a passion that drives everything I do. I started my journey in 2019 through bug hunting, spending countless hours uncovering vulnerabilities and sharpening my skills. Along the way, I earned several CVEs, including CVE-2020-28722, CVE-2021-36695, and CVE-2021-36696. Today, I’m still actively hunting bugs while also working with clients to secure their web apps, IPs, and APIs through Vulnerability Assessment and Penetration Testing (VAPT), patch management, and consultancy. I’ve always enjoyed the mix of technical challenges and creative problem-solving that cybersecurity offers. Whether it’s uncovering hard-to-find vulnerabilities or tightening defenses, I approach every project with the goal of pushing systems to their limits, so they can come out stronger. For me, breaking into a system isn’t the endgame; it’s just the first step toward making it more resilient. This combination of passion and experience has landed me on the Bugcrowd Monthly Top 10 leaderboard globally and earned me MVP status in multiple quarters. These milestones keep me motivated to stay ahead of the curve, explore new techniques, and help build a safer digital world, one vulnerability at a time.