Skip to content
View iam-niranjan's full-sized avatar
:octocat:
Building secure systems with automation and coffee
:octocat:
Building secure systems with automation and coffee

Block or report iam-niranjan

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
iam-niranjan/README.md

Hey, I'm Niranjan Ganesan 👋

Security Leader · Cloud Security · Vulnerability Research · Governance · AI Security

Research Interests

• Vulnerability Research
• Application Security
• Cloud Security
• AI and Agent Security
• Open Source Security
• Security Automation
• Responsible Disclosure
• Security Governance and Compliance

Security Contributions

mail-parser (SpamScope) — 3.2M+ PyPI downloads/month

liquidpy — 317K+ PyPI downloads/month

  • GHSA-2jj6-v3xw-49w3 | Server-side template injection and sandbox escape leads to arbitrary code execution

fastjsonschema — 138M+ PyPI downloads/month

  • Security fix | Code injection via unescaped property name in generated validator | Fixed in 2.22.2

guard-core — 34K+ PyPI downloads/month

  • GHSA-r7hm-rjvg-xx7j | Quadratic ReDoS in a built-in detection pattern freezes the event loop
  • GHSA-w7wg-6q7v-44f2 | Whitespace-collapse preprocessing disables the CRLF and command-injection detectors
  • GHSA-gm9r-hvc9-96gv | Unvalidated X-Forwarded-For value interpolated into a Redis KEYS glob pattern

Selected Publications

CCSK Success Story: From an IT and Cloud Security Manager · Cloud Security Alliance, 2022 · Read

CXO Samvaad Volume 2: Leadership in the Age of AI · Bharat CXO, 2026 · Read

Certifications

AI Governance & Threat Intelligence
ISO 42001:2023 Lead Auditor · Certified ATT&CK Cyber Threat Intelligence · Certified ATT&CK Security Operations Center Assessments

Governance, Risk & Audit
CISA · CISM · CRISC · CGEIT · CCISO · Certified GCHQ Cyber Incident Planning & Response (CIPR)

Privacy
CDPSE · CIPT · Privacy Engineering Certification

Cloud Security
AWS Certified Security Specialty · AWS Certified Solutions Architect Associate · CCSK · CCZT · Certified Advanced Cloud Security Auditing (CSA STAR)

ISO Standards
ISO 27001:2022 Lead Auditor · ISO 27001:2013 Lead Auditor

Technical & Practitioner
CompTIA Security+ · CompTIA PenTest+ · CompTIA Network Vulnerability Assessment Professional · Redis Security · VMware Certified Associate Data Center Virtualization

Service Management & Agile
ITIL v4 Foundation · Certified Scrum Master · Certified Agile Leader 1 · Certified Agile Leadership Essentials (CAL E) · Certified Agile Leadership for Teams (CAL T) · Certified Agile Leadership for Orgs (CAL O) · Cyber Supply Chain Management

Verified Credentials

Credly Accredible

n8n Automation Workflows

10 published workflow templates on n8n — security and AI-driven automation workflows.

View full n8n creator profile →

Chrome Extensions

Security Insights: Phishing Protection — 1.46K+ users · Real-time phishing protection using a regularly updated database of known malicious domains. No data collection.
Chrome Web Store

Webhook Quick Trigger — Instantly trigger webhook endpoints from your browser without context switching. Test APIs, automate workflows, and manage webhooks securely.
Chrome Web Store

Contact

Portfolio LinkedIn

Pinned Loading

  1. docdrop docdrop Public

    Drop a document. Get clean Markdown. No AI, no account, no history.

    JavaScript 40 38

  2. wcag-skills wcag-skills Public

    Turn the official WCAG 2.2 accessibility guidelines into verified SKILL.md files, with independent validation.

    Python

  3. slack-n8n-integration-hub slack-n8n-integration-hub Public

    JavaScript 3 2

  4. Vendor-Security-Assessment-Questionnaire-Generator Vendor-Security-Assessment-Questionnaire-Generator Public

    Vendor Security Assessment Questionnaire Generator

    JavaScript