Codex SecurityCertification
Practical Malware Analysis & Triage
Atif Ali
Issued by TCM Security.
Training completed and recognition earned by the Codex Security team.
Atif Ali
Issued by TCM Security.
Atif Ali
Issued by CompTIA.
Atif Ali
Issued by INE Security.
Atif Ali
Issued by INE Security.
Atif Ali
Issued by Microsoft.
Atif Ali
Issued by EC-Council.
Hamza Farooqi
Issued by OffSec. Earned January 22, 2026.
Hamza Farooqi
Issued by CompTIA. Issued January 4, 2026.
Muhammad Hammad
Listed in the Bindle security hall of fame for responsibly reporting a vulnerability.
View hall of fame page →Muhammad Hammad
Listed in the GenieBelt security hall of fame for responsibly reporting a vulnerability.
View hall of fame page →Muhammad Hammad
Listed in the Check Point security hall of fame for responsibly reporting a vulnerability.
View hall of fame page →Muhammad Hammad
Listed in the Invoiced security hall of fame for responsibly reporting a vulnerability.
View hall of fame page →Muhammad Hammad
The ZenMate security team confirmed in April 2016 that he is now a member of their hall of fame.
Muhammad Hammad
CloudApp support (April 2017) confirmed they added him to their hall of fame after his bug report.
Muhammad Hammad
Chartboost (March 2017) thanked him for his report and pointed to their white-hat page listing.
Muhammad Hammad
Exact Security Team (January 2021) thanked him for reporting an issue on reeleezee.nl and said his details would be added to the hall of fame once approved.
Muhammad Hammad
FloydHub confirmed they were setting up their hall of fame page to list him.
Muhammad Hammad
Docparser’s founder confirmed his hall of fame entry in October 2017.
Muhammad Hammad
Dell’s vulnerability research team (August 2016) confirmed his details were listed on their site for Q2 2016.
Muhammad Kamran
Listed in the Hopin security hall of fame for responsibly reporting vulnerabilities.
View hall of fame page →Muhammad Kamran
Listed in the Copilot security hall of fame for responsibly reporting vulnerabilities.
View hall of fame page →Muhammad Kamran
Listed in the T-Mobile Czech Republic security hall of fame for responsibly reporting vulnerabilities.
View hall of fame page →Muhammad Kamran
Listed in the LiveKit security hall of fame for responsibly reporting vulnerabilities.
View hall of fame page →Muhammad Kamran
Listed in the Springer Nature security hall of fame for responsibly reporting vulnerabilities.
View hall of fame page →Muhammad Hammad
Listed in the Workpay bug bounty hall of fame (February 2026) for reporting a medium-severity missing security header that allowed iframe injection. Status: fixed.
View hall of fame page →Hamza Farooqi
Recognised for identifying and responsibly disclosing vulnerabilities on the sudo.ai website, helping the team fix critical issues quickly.
Hamza Farooqi
Certificate of Appreciation (August 16, 2025) for responsibly disclosing a security vulnerability to Aroasis Softech.
Hamza Farooqi
Letter of Acknowledgement from Huawei PSIRT (April 2021) for reporting a security issue in a Huawei IT system.
Hamza Farooqi
Thanked in May 2024 for proactively identifying and voluntarily disclosing security vulnerabilities.
Muhammad Hammad
Letter of appreciation (August 2025) for his report of a vulnerability on their website, which has since been rectified.
Muhammad Hammad
Acknowledgement of vulnerabilities he reported in their website and email server configurations.
Muhammad Hammad
Appreciation letter (April 2020) for reporting a vulnerability with a proof of concept and remediation advice.
Muhammad Hammad
Letter of appreciation for taking the time to uncover a security flaw and helping resolve it.
Muhammad Hammad
Thanked (September 2016) for pointing out vulnerabilities in Clavister’s corporate website.
Muhammad Hammad
Letter (July 2018) confirming he detected and resolved security vulnerabilities in their software.
Muhammad Hammad
Acknowledgement (February 2017) of security issues he reported on EVGA’s websites, since confirmed fixed.
Muhammad Hammad
Letter from Aman Holding’s Cyber and Information Security Director praising his professionalism and responsible disclosure.
Muhammad Kamran
Thanked for responsibly disclosing a clickjacking vulnerability on edusynch.com.
Muhammad Kamran
Letter of appreciation (October 2021) for responsibly reporting misconfigured SPF record flags.
Muhammad Kamran
Letter of appreciation (March 2025) for responsible disclosure of an XML-RPC vulnerability.
Muhammad Kamran
Letter of appreciation from the Cloudera Bug Bounty Committee (April 2021) for reporting a security misconfiguration.
Muhammad Kamran
Formal letter (May 2025) thanking him for responsible disclosure of security vulnerabilities.
Muhammad Kamran
Letter of appreciation (April 2025) for responsible disclosure of a potential vulnerability on cradle.bio.
Muhammad Kamran
Letter of appreciation (April 2025) for a security vulnerability report.
Muhammad Kamran
Letter of appreciation (September 2025) for reporting a vulnerability in Meyka’s email security configuration.
Codex Security team
EthosX’s CEO thanks the team for reaching out about a major vulnerability and guiding them through the fix.
Muhammad Kamran
Letter of appreciation (June 2025) for reporting a DMARC misconfiguration that could have allowed email spoofing.
Muhammad Kamran
Acknowledged for responsibly disclosing a denial-of-service vulnerability reported on May 31, 2025.
Muhammad Kamran
Thanked (September 2025) for a responsible disclosure about the company’s DMARC configuration.
Muhammad Kamran
Certificate of appreciation (June 2025) for finding a website vulnerability and reporting it responsibly.
Muhammad Kamran
Thanked by the CTO for flagging missing DMARC protection on their email domains.
Muhammad Kamran
Letter of appreciation (October 2025) for responsible disclosure of a security vulnerability on their platform.
Muhammad Kamran
Thanked for reporting a potential vulnerability related to the xmlrpc.php endpoint.
“…found and reported a bug on our website. I really appreciate his effort, and hopefully, he can help many other website owners to find vulnerabilities on their websites.”
Recommended Muhammad Kamran
— Claudio Lo Cascio, Customer Support Lead
“Helped us to find some configuration issue with our DNS record. He has good hard and soft skills as a security professional.”
Recommended Muhammad Kamran
— Viktor Smirnov, DevOps Engineer
“He is a talented engineer and an excellent security expert. He is good at detail, creative, smart, knows the priorities of work.”
Recommended Muhammad Kamran
— Changhee Suh, Head of Engineering and Co-founder
“Detected and ethically reported website security issues. Thank you for your service.”
Recommended Muhammad Kamran
— Simone Scarduzio, Principal Engineer and Co-founder
“Muhammad embodies the spirit of ethical hacking with his commitment to responsible disclosure and helping to create the safest internet possible.”
Recommended Muhammad Kamran
— John Turner, Director of Information Security
“…has alerted us to a vulnerability in our system. Very friendly contact.”
Recommended Muhammad Kamran
— Ulrich Bunnick, Owner, VirtuaLX WebService
“He identified and responsibly disclosed a vulnerability in the configuration of one of our services, which we promptly fixed.”
Recommended Muhammad Kamran
— Alan Descoins, CEO
“He detected and ethically reported a security issue on our website. Thank you for your service.”
Recommended Muhammad Kamran
— Nicolas Claverie
“Muhammad identified an issue with our SPF settings and shared a very clear description of the issue along with recommendation of a fix.”
Recommended Muhammad Kamran
— Sivaramakrishnan Narayanan, Co-founder and CTO
“Muhammad is one of the best white-hat hackers I know. He’s astute, confident, and very technical.”
Recommended Muhammad Kamran
— Tim Salau, Author
“…we consider Muhammad Hammad to be a reliable and skilled security professional, and we would not hesitate to recommend him for security research, audits, or responsible disclosure work.”
Recommended Muhammad Hammad
— Lucas Gozalvez, Founder and CEO (recommendation letter)
“Muhammad is knowledgeable and can determine security-related issues using nothing but his experience, and reports in detail why an issue could be a problem and points towards related material to determine a fix.”
Recommended Muhammad Hammad
— Maarten Balkauw, Director (recommendation letter)
“I had the pleasure of working with Hammad, and I can genuinely say he is an exceptional penetration tester. His technical expertise, professionalism, and commitment to ethical practice set him apart.”
Recommended Muhammad Hammad
— Amr Zakaa, Director of Cyber and Information Security, Aman Holding
“Muhammad identified and responsibly disclosed a security issue on our website. Great communication, ethical mindset, and helpful recommendations.”
Recommended Muhammad Hammad
— Léandre Carpentier, CTO and Co-founder
“…he proactively reached out to alert our team about CVE-2025-55182, a critical 10.0 CVSS vulnerability affecting React Server Components. His timely intervention helped us take immediate action to secure our infrastructure.”
Recommended Muhammad Hammad
— Hassan Zili, Professor, CTO, AI and Software Architect
“Muhammad found a security vulnerability on our website and proactively reported it to us, allowing us to fix it in a timely manner without compromising any of our data. That was a great catch!”
Recommended Muhammad Hammad
— Andrey Chursov
“We appreciate Hammad ethically reporting a vulnerability on our website.”
Recommended Muhammad Hammad
— Katrina Mottee, Senior Lawyer and Strategic Business Partner
“Muhammad helped us by identifying and reporting a vulnerability on our website.”
Recommended Muhammad Hammad
— Joe Lovelock, Co-founder and Creative Partner
“Muhammad did a great job finding vulnerabilities on the websites. He was so kind to report them, and helped to fix and troubleshoot those problems.”
Recommended Muhammad Hammad
— Yaroslav Savenkov, Product Manager
“Muhammad informed us of vulnerabilities.”
Recommended Muhammad Hammad
— Moises Corkidi, Senior Sales Executive, IT Administrator
“Muhammad helped us track down a security issue and was thorough in his analysis.”
Recommended Muhammad Hammad
— Gerben Wartena, Managing Director, Operations Manager
“I can recommend Muhammad and his company… who located a bug in our website and were very fair and helpful in disclosing this and helping with it.”
Recommended Muhammad Hammad
— Pete Finnigan, Founder and CEO
“Muhammad showed amazing professionalism in his approach to his work and his communication. It was a pleasure working with him!”
Recommended Muhammad Hammad
— Sofiane Bébert, Engineering
“Shiraz came up to me with a recommendation on how to repair the email authentication (DMARC TXT record) of the Dynamic Applications website.”
Recommended Shiraz Ali Khan
— Martin Bernhardt, Dynamic Applications | Business Model Calculations
“Shiraz participated in our Responsible Disclosure program. He responsibly reported his research and shared information that allowed us to quickly address the issue. His skills and professionalism are much appreciated.”
Recommended Shiraz Ali Khan
— Josh Sosnin, SVP and Chief Information Security Officer (CISO), Ellucian
“Shiraz helped us identify and address a potential security issue in our infrastructure, giving a clear report and suggesting remedy actions. The communication was extremely professional and respectful.”
Recommended Shiraz Ali Khan
— Jo Barratt, Audio maker
“Shiraz helped discover security vulnerabilities and recommend remedial actions in a high traffic API. He is exceptionally knowledgeable and driven to deliver quality reporting and analysis of such vulnerabilities. Very impressed!”
Recommended Shiraz Ali Khan
— Miles Granger, Tech Lead, NORCE Research
“Shiraz helped us to eliminate a security vulnerability on one of our systems.”
Recommended Shiraz Ali Khan
— Illia Herashchenko, Chief Technology Officer, Mandibhav
“Shiraz helped us to find and address a potential security vulnerability in our application. The report he sent to us was detailed, professional, and included clear steps to mitigate the issue.”
Recommended Shiraz Ali Khan
— Brian Margolis, Staff Software Development Engineer, RedCircle
“Shiraz identified an issue with the security of our website domain. His instructions to fix this security issue were clear and very well explained. We are grateful for his help!”
Recommended Shiraz Ali Khan
— Daniel Rumling, Engineer
“Shiraz Ali Khan noticed a security issue on a website which allowed us to fix this.”
Recommended Shiraz Ali Khan
— Jamie Youell, Web developer, Buro26
Nothing listed in this category yet.
Tell us what you need protected. We'll reply with scope, timeline and a quote.