Rio D. (riodrwn)
About
Hi, I'm Rio, an offensive security engineer and security researcher based in Indonesia. I enjoy figuring out how applications and systems work, where they break, and how to make them safer. My work covers web and mobile applications, APIs, Active Directory, and enterprise infrastructure.
I've helped government agencies and private organizations find and fix security weaknesses through penetration testing and red team engagements. Outside of client work, I hunt bugs, research vulnerabilities, publish CVEs, and share what I learn on Medium. I also enjoy building security tools, experimenting with AI-assisted testing, and solving CTF challenges.
If you're thinking of hiring me, I bring a hands-on approach and a curiosity that keeps me digging beyond the first finding. I care about understanding the impact, explaining it clearly, and helping teams work toward a practical fix. There's always something new to learn, and that's what keeps this work interesting for me.
Bug Bounty Research
The organizations below have recognized my work as a bug hunter through responsible vulnerability disclosures.
CVE disclosures
Public CVEs assigned to vulnerabilities I responsibly disclosed.
| CVE | Product | Type | Severity | Year | Reference |
|---|
WordPress plugin CVE research: 190 discoveries listed on Wordfence.
Experience
Certifications
Notes
Latest posts
Write-ups, disclosure notes, CTF learnings, and practical security research logs.