About

Fırat Hilmi KAPLAN

Application Security Specialist

I’m an Application Security Specialist working across web, API, and mobile security, with a focus on code review, security testing, vulnerability analysis, DevSecOps, and the broader security context in which applications operate.

My work sits at the intersection of offensive security and secure engineering. I’m interested in understanding how systems fail under real-world conditions, how assumptions break, trust boundaries are crossed, and implementation decisions turn into exploitable behavior. I tend to approach security problems by following data flows and control paths from the exposed attack surface down to the code, architecture, identities, infrastructure, and design decisions that ultimately create the weakness. I’m also interested in how application-layer vulnerabilities interact with the surrounding cloud and platform environment, and how seemingly isolated issues can become more significant when viewed in the context of the wider system.

Outside day-to-day application security work, I spend much of my time on vulnerability research, real-world CVE analysis, bug bounty research, exploitability analysis, source-code reasoning, technical experimentation, and security tooling. I care more about understanding root causes, reproducing behavior, and extracting reusable lessons than simply identifying individual findings.