$ cat about.md

About

Developer turned Security Engineer, based in Gujarat, India. Solution Analyst at Argusoft India since 2023.

## skills

languages

JavaScript, TypeScript, C#, Python

frontend

React, Redux, Next.js, Angular, Tailwind CSS

backend

.NET, Node.js, REST, gRPC

databases

MySQL, PostgreSQL

devops

Docker, CI/CD, Prometheus, Grafana

security

VAPT, OWASP Top 10, WSTG, threat modelling, OSINT, CIS Benchmarks

security tools

Burp Suite, OWASP ZAP, Nmap, Nuclei, Nessus, SQLmap, Nikto, Metasploit, SysReptor, TruffleHog, Maltego

## certifications

• done CC - Certified in Cybersecurity · (ISC)²
• in progress eJPT - Junior Penetration Tester · INE / eLearnSecurity
• in progress OSCP - Offensive Security Certified Professional · OffSec

## education

B.E. Information Technology, L.D. College of Engineering, Ahmedabad · 2019–2023 · CGPA 8.65/10

## contact

Want me to talk to your dev team about attack surface, or test your app?

• email ankurldce2023@gmail.com
• linkedin linkedin.com/in/ankur-khunt-122b971b0
• github github.com/ankurldce2023

## how this site is secured

A security site should follow its own advice:

• Static only - no server code, no database, no login. Almost no attack surface.
• Strict Content-Security-Policy - no inline scripts, no third-party scripts, no trackers, no cookies.
• Security headers - HSTS, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, frame-ancestors 'none'.
• No version leaks - no Server or X-Powered-By version banners.
• Pinned everything - exact npm versions with a lockfile, and GitHub Actions pinned by commit SHA.
• Scanned on every push - Gitleaks and npm audit run in CI before deploy.