Hi there!

I'm Michael. I'm a Sydney-based security researcher and software engineering student at the University of Sydney.

I do vulnerability research, specialising in web applications and backend APIs, with a particular interest in AI-assisted research. I've earned over $100,000 in bug bounties and am currently ranked #1 in Australia on the Google Vulnerability Rewards Program leaderboard.

Outside of security and software, I play piano, carillon, sing, write music (coming soon to this website), record and produce music, and do various random music-related tech stuff.

Want to get in touch? You can reach me via or LinkedIn (Signal available on request).


Acknowledgements and open-source libraries used on this site.