I'm Lali Akhil Raj — building resilient software and researching vulnerabilities across web, supply chain, and systems.
Lali Akhil Raj
LF32 · India
Security-first
Design → ship
Open source
Kernel · GSoC · tooling
Collaborated with & recognized by
From kernel internals to production apps — a full-stack security mindset.
Bug bounty, threat modeling, and responsible disclosure across web and supply chain.
Linux kernel contributions, fuzzing, and low-level tooling with the Foundation.
Shipping resilient apps with a security-first mindset from design to deploy.
A living snapshot — more useful than a dusty bio.
Work
Stealth / building in security & AI risk
Research
Supply chain threats, secure defaults, kernel-adjacent tooling
Writing
Blog posts on attacks, accelerators, and hard-earned lessons
Based
India · remote-friendly
IIT (BHU) graduate blending modern engineering with rigorous security research.
Recent graduate from the Indian Institute of Technology (BHU), Varanasi, with a degree in Computer Science and Engineering. My academic foundation is complemented by hands-on experience in software development and cybersecurity research.
I specialize in building secure, scalable applications with a security-first mindset — combining modern development practices with rigorous testing and vulnerability assessment.
HackerOne
NexB
The Linux Foundation
Interested in security research, product work, or open-source collaboration?
A working set — depth over logo bingo.
Defense research, kernel development, and open-source security tooling.
Defence Research and Development Organisation | RCI
India
Specialized in security engineering at India's premier defense research organization, focusing on web application security assessments and real-time missile tracking systems. Built Python-based security tools and conducted comprehensive threat modeling for critical defense applications.
The Linux Foundation
Remote
Contributed to the Linux kernel ecosystem through advanced fuzzing techniques and Rust integration for Linux 6.1. Collaborated with kernel maintainers including Shuah Khan on kselftests and Greg Kroah-Hartman on essential development scripts.
NexB, Google Summer of Code
Remote
Developed ScanText, a license and copyright scanning tool for software dependency analysis. Enhanced scancode-toolkit while researching supply chain security through VulnerableCode. Discovered and responsibly disclosed critical security flaws.
Security platforms, intelligence tooling, and open-source scanners.
A collaborative platform for secure code reviews with automated vulnerability detection and real-time collaboration for development teams.
Real-time threat intelligence dashboard aggregating security data from multiple sources with automated monitoring and alerts.
Automated penetration testing framework integrating multiple security tools for vulnerability assessment and reporting.
Tool for analyzing software dependencies and detecting supply chain vulnerabilities in open source packages.
Recent notes on security, systems, and building.
Profiles, keys, and places I actually show up.
The questions people ask before they email.
Secure software, AI-assisted risk assessment, and research that turns into real product decisions. Also writing when something is worth documenting.
Every serious security site needs one unsupervised button.
Public repos, no surprise chorus. Star if useful, issue if broken.
Status: green. No earworms detected. (Yet.)
Tip: the green dashed card is not a vulnerability. It is a feature.
Open to collaboration, consulting, and security research discussions.