01
AI Security
AI & Agent Security
Security of AI agents and tool-calling workflows against prompt injection and unsafe tool usage, through red-team driven attack simulation and policy enforcement.
LLMs · Prompt injection · Red teamingSanil Grover
I like breaking things to understand how they fail.
Cybersecurity Researcher/B.Tech CSE, Thapar '27
Former security intern at I4C (Ministry of Home Affairs) and eSecForte, where I worked on cloud security. Now exploring AI agent security. AWS Certified Solutions Architect – Associate. B.Tech CSE, Thapar, class of 2027.
- Malware Analysis
- Reverse Engineering
- Cloud Security
- AI / Agent Security
- Android & App Security
that's me → more of the same
Recommendations
What people say
Recommendations from colleagues, mentors, and internship supervisors will appear here as they come in.
Leave a recommendationKnow me? Leave a recommendation →
Why I do this
I study what happens when systems stop behaving the way they're supposed to.
Third-year CS student at Thapar who ended up doing malware analysis at the Ministry of Home Affairs before fully knowing what JADX was. That internship did more for my understanding of how threats actually work than any course has.
Most of my time goes into figuring out how systems behave under adversarial conditions, whether that's a malicious APK hiding its intent behind layers of obfuscation, an AI agent being coaxed into doing something unintended, or a deepfake detection pipeline I can actually trust.
- F1 fan
- Music
- Movies
- ⚡ Side quest maxxer
sanil@portfolio · fun-facts
tty1
The rabbit holes
What I'm exploring
Three threads run through everything on this site. Each one is backed by the internships, projects, and tooling detailed below.
02
Cybersecurity
Malware Analysis & Reverse Engineering
Static triage and dynamic instrumentation of malicious Android APKs: payload droppers, boot-receiver persistence, and C2 infrastructure disguised as legitimate API endpoints.
MobSF · JADX · APKTool · Frida · VirusTotalCloud & Infrastructure Security
Cloud security assessments across AWS resources: security misconfigurations, IAM and access-control weaknesses, and compliance gaps.
AWS · IAM · SAA-C03 certifiedAndroid & Application Security
Application-layer testing across the OWASP Top 10: SQL injection, SSRF, path traversal, file upload flaws, and OS command injection.
Burp Suite · HTTP Toolkit · PortSwigger labsNetwork Security
Vulnerability assessment plus hands-on enterprise networking: DHCP, subnetting, static/dynamic routing, firewall and proxy policies, NAT/PAT, and VLANs.
Nmap · Nessus · PCAPdroid · Searchsploit03
Security Research
OSINT & Threat Investigation
Reconnaissance on fraudulent infrastructure and investigation support during active cybercrime casework at I4C.
Nmap · ffuf · dirb · Exploit DBPublished research
Two papers presented at ICAAV 2026, the International Conference on Autonomous Aerial Vehicles (ADE-DRDO & AeSI), on UAV swarm identification and propulsion-system degradation modeling.
Read the researchThings I've broken on purpose
Selected work
Two pieces of work that best represent what I build. The full set lives on the projects page.
Where I've worked
Experience
2026Jun – Jul
eSecForte Technologies
Cloud Security InternCloud security assessments across AWS: misconfigurations, IAM and access-control gaps.
2025Jun – Aug
I4C - Ministry of Home Affairs
Security InternReverse-engineered 20+ malicious Android APKs, uncovering payload droppers, persistence, and C2 infrastructure.
2024Jun – Jul
Godfrey Phillips India
Summer InternVulnerability assessments with Nmap and Nessus; OWASP Top 10 labs in Burp Suite.
Research & writing
Papers and notes
Conference work presented at ICAAV 2026, the International Conference on Autonomous Aerial Vehicles (ADE-DRDO & AeSI), alongside notes written between coursework and deadlines.
Chapter & community
Leadership
OWASPChapter
OWASP TIET Chapter
Joint Secretary- Delivered and contributed to 25+ cybersecurity sessions over the past year, including a Podium workshop series with 400+ attendees.
- Designed CTF challenges and co-managed an event with 1800+ registrations.
MLSCMember
Microsoft Learn Student Chapter
Member- Delivered a Podium cybersecurity workshop series with 400+ attendees, including a session at TechMeet 2024.
Technical arsenal
What I work with
The tools and technologies behind the threads above. No progress bars. The work is the evidence.
Cybersecurity
Programming
AI & ML
Tools
Other
Outside the terminal
The rest of it
F1 · Music · Movies · Side quests
When I'm not staring at decompiled bytecode, I'm usually deep in a completely unnecessary F1 rabbit hole, listening to something on repeat, or picking up a side quest nobody asked for.
- F1 fan
- Music
- Movies
- ⚡ Side quest maxxer
Open to security roles and research collaboration
Internships and opportunities in cybersecurity, threat intelligence, and applied AI/ML. Happy to talk about malware analysis, agent security, or anything in between.