Rishi C.

WORK HISTORY

ABOUT RISHI C.

Rishi is a Senior Security Researcher at KYND, specialising in zero-day vulnerability research, threat intelligence, attack surface management, security automation, and OSINT.Research and ContributionsIn 2025 alone, Rishi has analysed more than 24 CVEs and developed detection methodologies adopted by security teams globally. His research has been recognised by the UK NCSC, CERT Polska, and the National Vulnerability Database (NVD) maintained by NIST. As a member of the Project Discovery Pioneers programme, he has contributed over 500 Nuclei templates for vulnerability detection, DNS reconnaissance, OSINT workflows, and phishing identification.His work encompasses the full threat lifecycle: examining adversarial tactics, techniques, and procedures; identifying unknown assets and misconfigurations; reducing external exposure; and developing detection strategies informed by established security frameworks. He translates technical findings into business context, enabling stakeholders to understand risk and prioritise remediation whilst balancing security requirements with operational constraints.Within the OSINT domain, Rishi monitors digital footprints across multiple sources, supports incident response and brand protection initiatives, and leverages publicly accessible data to identify potential threats, subsidiary risks, and supply chain vulnerabilities. His methodology combines technical analysis with investigative thinking, particularly in DNS-based reconnaissance and the correlation of disparate data sources to construct comprehensive threat intelligence assessments.He maintains a strong commitment to responsible disclosure, collaborating with vendors and CERTs to ensure vulnerabilities are remediated prior to public disclosure, whilst contributing to coordinated disclosure programmes and threat intelligence sharing initiatives.Community Involvement- OWASP Member- UK OSINT Team Member- Project Discovery PioneerSpeaking Engagements:Rishi has presented at DEFCON, multiple BSides conferences, and OWASP London on OSINT and attack surface management techniques. He has also briefed UK parliamentarians and government officials at Westminster, London on vulnerability disclosure policy and software supply chain security, advocating for legal protections that facilitate responsible security research.