about rishi
Vulnerability researcher and threat intelligence specialist based in London, UK. Security Researcher at The Shadowserver Foundation and part of the executive leadership of the UK OSINT community.
profile
Rishi is a vulnerability researcher and threat intelligence specialist working at the frontline of cyber defence, with detection research recognised by governments across North America, Europe, and Asia, and trusted by national cyber authorities and law enforcement to help identify and counter emerging threats.
He has briefed the UK Government and Policy Makers on the risks confronting critical infrastructure and the software supply chain. A multi-time DEF CON and BSides speaker, he has also presented at OWASP London and shared his perspective with senior audiences on the fast-evolving threat landscape.
A significant part of his work is committed to the open-source community, authoring detection tooling relied upon by others and contributing to the frameworks behind modern reconnaissance and attack surface discovery. He gives his time to help defenders worldwide and to produce educational content and events for those looking to learn.
His broader background spans enterprise IT, endpoint security, compliance, and infrastructure, giving him a grounding in both the technical detail and the wider operational picture.
experience
- Engineering detection signatures and internet-wide scans
- Turning honeypot data into actionable detections
- Supporting government cyber response
- Equipping CSIRTs with exposure data
- Strengthening sovereign UK intelligence capability
- Produces high-quality OSINT educational content
- Organises and hosts OSINT events across the UK
- Led enterprise vulnerability research
- Architected an internet-wide platform scanning millions of assets
- Authored advisories translating CVE, CVSS and EPSS data into business risk
- Delivered network and endpoint support within SLA across 500 customers
- Led Windows 10 migration and MFA rollout to 2000 endpoints
- Maintained EPP/MDR, Active Directory and O365 / Google Workspace
affiliations
- Authored 950+ Nuclei detection templates used worldwide
- Shapes PD Cloud through beta testing and product guidance
- Authors technical blog content for ProjectDiscovery
- Contributes to Amass, OWASP's attack surface framework
- Contributes to Nettacker, an automated recon framework
- Supported the OWASP Amass workshop at DEF CON 33
recognition
research
projects
Open-source tooling, detection content and research — built and maintained on GitHub.
detection & threat intel- 3 Critical (27%)
- 8 High (73%)
- 4 · 2023
- 2 · 2024
- 1 · 2026 1 · 2021 1 · 2019
- 1 · 2017 1 · 2015
- 5 SQL injection (45%)
- 4 Traversal / file read (36%)
- 1 SSRF (9%)
- 1 RCE (9%)
speaking
Multi-time DEF CON speaker across the Red Team, Recon and Social Engineering Villages — including workshops and roundtables — alongside the BSides circuit in Europe and the US, OWASP London, Hack Glasgow and ElbSides Hamburg, plus a ProjectDiscovery interview and a Current State of AI roundtable in Budapest. He has also briefed the UK government and policymakers on supply chain risk and vulnerability research.
Hiring-machine social engineering, DNS OSINT and Amass — talks plus hands-on workshops.
AI-driven vulnerability research, OSINT and attack surface management.
Supply chain risk and vulnerability research for critical infrastructure.
skills
Want the full CV?
Open to security collaborations, speaking engagements, and media commentary.