monke

Hi! I'm monke, and I run Simian Security. I have over 5 years of experience in the security industry, with over 180 paid findings in bug bounty. I specialise in Web2 - specifically, Javascript hacking and AI hacking. I won Most Valuable Hackers with my team at Google's LLM Bugswat event in Tokyo in April 2025, hacking on Gemini itself. I have extensive familiarity with technologies such as browser protections, Javascript APIs, and reverse engineering of frontend logic, and I have some findings in Chrome itself as well.

Previously, I worked in SaaS security as a security researcher at AppOmni.