Profile banner
Zayne Zhang

Zayne Zhang

Software engineer, wannabe hacker, not an AI shill

zayne
United Kingdom
Joined January 2026
Favicon imageanalogue.computer
Favicon imagegithub.com
Favicon imageuk.linkedin.com
Favicon imagesched.securitybsides.org.uk
Favicon imagepretalx.com

Network

9.1K connections
😈
Offensive Security Experts
🇸🇬
Singapore Tech Public Sector
💡
Startup Founders
🛡️
HackerOne Community
🏢
Big Tech Security
🔬
AI Security Research
🤖
...

Summary

Zayne is a visionary entrepreneur and co-founder of Hacktron AI, a pioneering company developing AI agents to automate offensive security, aiming to solve a significant portion of software security problems. His commitment is evident in his decision to take leave from Cambridge University to dedicate himself full-time to this venture, which is backed by Project Europe. analogue+3
With a strong background in computer security, Zayne has demonstrated expertise through discovering vulnerabilities, earning 15 CVEs, performing freelance security consulting for Cure53, and excelling in bug bounty programs for the Singapore government. He is also a skilled CTF player, having placed second in the DEF CON CTF finals twice. analogue+3
Zayne is an articulate communicator and researcher, having given speaking engagements at security conferences in the U.K. and Singapore on topics like XS-Leaks. His personal blog features in-depth reflections on his career path and the challenges and future of security. analogue+3
He is an active builder of products, including EurekaPad, a note-taking app for STEM students. His work reflects a passion for developing impactful solutions and being close to the product development lifecycle. analogue+2

Work

Education

Projects

Writing

Leaving Cambridge and co-founding Hacktron AI

May 1, 2025

A personal blog post detailing his decision to take leave from Cambridge University to fully commit to Hacktron AI, discussing his journey, motivations, and the vision for Hacktron AI.

Favicon imageanalogue.computer

Why I'm "quitting" (offensive) security

August 1, 2024

A personal blog post reflecting on his journey in cybersecurity, his reasons for shifting focus from offensive security, and his insights into effective security practices.

Favicon imageanalogue.computer

XS-Leaks

January 1, 2023

In-depth security research into XS-Leaks, which abuse interactions between websites to leak sensitive user information. Presented at BSides conferences.

Favicon imageanalogue.computer

HTTP request smuggling in the multiverse of parsing flaws

January 1, 2022

In-depth security research into HTTP request smuggling, contributing to his 15 CVEs.

Favicon imageanalogue.computer

Hobbies

Actively participates in Capture The Flag (CTF) competitions, placing 2nd at DEF CON CTF finals twice with 'Blue Water' and playing with 'cheriPI' at Cambridge. analogue+1