// ABOUT
One practitioner. Offense and defense.
Xocipher is an independent security practice run by one person: I break into systems professionally, and I use exactly that knowledge to protect people.
[xocipher]
Security Researcher & Privacy Engineer
- AliasXocipher
- DisciplineOffensive & Defensive
- BaseRemote / Worldwide
- ProgramsBugcrowd, HackerOne
- FrameworksNIST CSF, MITRE ATT&CK
- PGPOn request
- Est.2026
// BACKGROUND
Offensive security, turned into protection.
I'm an independent security researcher and red teamer with years of hands-on work across bug bounty programs on Bugcrowd and HackerOne, plus offensive security and cyber investigation. I spend my days finding how systems get broken and how people get compromised.
That is exactly why the privacy side exists. I have seen firsthand how ordinary people get exposed, extorted, and tracked, so I turned the same skills around: migrating people off Big Tech, hardening their devices, and keeping their data out of reach. The offensive tooling still ships for fellow researchers; the services put that knowledge to work protecting real people.
- Years of hands-on offensive security and investigation
- Active bug bounty researcher on Bugcrowd and HackerOne
- Works within NIST CSF and MITRE ATT&CK
- Independent and unaffiliated: recommendations on merit only
// FOCUS AREAS
Where the work concentrates.
Two sides of the same craft: the offensive research that finds the weaknesses, and the protective work that closes them.
Offensive Security
Recon, enumeration, and vulnerability discovery across authorized web and API targets.
Bug Bounty Research
Ongoing work across public and private programs, reported through Bugcrowd and HackerOne.
Cyber Investigation
Tracing infrastructure, attribution, and digital footprints as part of broader security research.
Privacy Engineering
Migrating people off Big Tech onto private, end-to-end-encrypted stacks they actually understand.
Device Hardening & Fingerprinting
Locking down computers and phones: encryption, encrypted DNS, telemetry and fingerprint minimization.
Secure Software (in development)
Building toward end-to-end-encrypted, decentralized, anonymous software: a messenger, a social platform, and a hardened site option.