Global offensive-security leadership. Original security research. Ideas that move the industry forward.
Nipun Jaswal brings more than 20 years of cybersecurity experience to executive forums, technical conferences, media conversations and industry communities. His work connects hands-on vulnerability research with the realities of building and leading modern offensive-security capabilities.
Senior Director and Global Capability Leader – Offensive Security
Nipun is a global offensive-security leader, cybersecurity author and vulnerability researcher. He leads the development of advanced capabilities spanning red teaming, AI-assisted security testing, vulnerability research, attack simulation and enterprise security transformation.
His career combines deep technical work with global leadership. He has authored 12 books, published security research and disclosures, built and led specialist teams, represented India internationally, and contributed to the cybersecurity community through speaking, mentoring and research.
Earlier in his career, he also trained and worked with law-enforcement teams on vulnerability research, exploit development and digital-investigation capabilities.
20+ Years in Cybersecurity · 12 Books · Global Leadership · Vulnerability Research
A selection of career-defining achievements across research, leadership and the global cybersecurity community.
Computing’s Top 30 Early Career Professionals, 2024
Selected by the IEEE Computer Society among 30 early-career professionals advancing computing through technical excellence, innovation and leadership.
India’s Top 100 Cybersecurity Influencers
Recognised in the CF100 India 2025 cohort celebrating cybersecurity leaders shaping digital defence, resilience and security innovation across India.
Responsible disclosure, public exploit research and technical work that has influenced both practitioners and training ecosystems.
Nipun has reported more than ten zero-day vulnerabilities, with public research and exploit references appearing across Exploit-DB, NVD and Rapid7.
One of his critical buffer-overflow discoveries, CVE-2017-13696, was later used as a teaching case in OSCP training—extending the research impact to thousands of cybersecurity learners.
Surviving official evidence confirms responsible-disclosure acknowledgements from Apple, Adobe, Mozilla and Red Hat.
Public research records and contemporaneous publisher biographies also document recognition from AT&T, Facebook, Microsoft, BlackBerry, Rapid7, Offensive Security, PayPal, Nokia, Zynga and Barracuda Labs. These legacy acknowledgements are identified as historically corroborated where the original vendor pages are no longer available.
His Opera browser search-order hijacking research, CVE-2018-18913, was responsibly disclosed and subsequently patched.
Keynotes, leadership sessions, technical talks, panels and media commentary.
A curated selection of current links, verified press coverage and clearly labelled archival records.
The following entries are preserved in the original site archive. Some external pages or video metadata are no longer reliably available.
These entries are retained as historical records where print clippings or archived source references survive.
Available for selected keynotes, panels, technical sessions, executive briefings, interviews and research conversations.
