Track record
HEBTECH Cyber Securities Services (OPC) Private Limited is a cyber security company registered with the Ministry of Corporate Affairs, Government of India. Our researchers have been finding and reporting vulnerabilities since 2020 — more than 1,200 to date — for organisations ranging from global technology platforms to Indian financial services.
Where we have worked
Through public bug bounty programmes, coordinated disclosure programmes and organisations’ own security channels. Every finding was reproduced, triaged and confirmed by the receiving organisation’s security team.
Public sample
Most of our work is private. A portion is public, and where it is, you can verify it yourself rather than take our word for it.
Figures published by HackerOne on the public profile hackerone.com/imtheking, one of our researchers. Signal and Impact are computed by HackerOne, not self-reported. The 1,200+ figure above covers our whole team across every channel, of which this profile is one part.
Recent disclosed work
Publicly disclosed and resolved. These are the flaws automated scanning does not reach — access control, session handling and request forgery inside real business logic.
Mirantis
Veterans United
Veterans United
Veterans United
Veterans United
Findings from commercial engagements are never published. These were disclosed by the receiving programme under coordinated disclosure.
In their words
Published verbatim by the programmes themselves on our public research profile.
“This researcher is top notch! They have found many great findings and recently a very challenging to discover but severe finding. Would highly recommend working with them especially on authentication/authorization issues. They really know how find more nuanced vulnerabilities.”
“I had a great experience working with this hacker. Their skills and professionalism exceeded my expectations. They were prompt, efficient, and kept me informed throughout the process. I highly recommend their services to anyone in need of their expertise.”
“Well written report, quick response times, and retesting.”
What this means for you
A 99th-percentile signal score means findings are reproduced and verified before they are submitted. You receive issues that are real, not a queue of false positives to triage yourself.
The bulk of our disclosed work is broken access control, IDOR and business-logic abuse — the class of flaw that leaks other customers’ data and that automated tooling consistently misses.
HEBTECH is an incorporated Indian company, not an individual contractor. You contract with a registered entity, under an NDA and written authorisation, with a CIN you can verify on the MCA public register.
Send the scope and objective. You receive a written response with an approach, a timeline and a fixed quotation — no obligation, no automated sales sequence.