This is the longer version — how I got here, what I focus on, and what I've put my name on along the way.
I'm Harsh Bothra — a security researcher, pentester and author based out of India. I've spent the last decade working across every surface offensive security touches: web and API, mobile and thick clients, networks and cloud, and most recently AI/ML and agentic systems.
The bulk of my career has been delivered as a pentester — over 700 engagements at this point, spanning startups, scaleups and publicly traded enterprises. Alongside the testing work, I've led triage operations, built and run security engineering functions, consulted on AppSec programs, and mentored a generation of new testers through writing, conference talks, and 1:1 sessions.
I'm a Computer Science Engineer, an OWASP chapter alumnus, former chapter leader of OWASP Bikaner, and a former chapter lead of OWASP Jaipur for over two years. I've authored two books on ethical hacking — both recommended by MHRD, AICTE & NITTTR for academic curriculum across Indian engineering institutions.
Today, I run my consultancy independently — taking on a small number of pentest, vCISO, advisory and mentorship engagements at a time. The work I do now is the kind that needs deep attention and senior judgement; that's the practice I've built.
The surfaces I've spent the most hours on.
A condensed timeline of roles & chapters.
For when the paperwork matters.
Limited slots, senior attention, no surprises. Initial scoping is free and non-obligatory.