# Pradyoth Prashanth

> AI security engineer and independent AI red-teamer. Security Engineer II and AI/ML Data Platforms Product Security Lead at JPMorganChase, building the firm's Gen AI red-teaming capability. Independently found 28+ vulnerabilities across 9 production AI products — disclosed responsibly, entirely self-directed on personal time, unrelated to and outside of his employment.

Based in Bengaluru, India. Works at the intersection of adversarial AI, security engineering, and trust & safety: probing LLMs and agentic systems for prompt injection, data leakage, intent drift, and misuse, then building the controls and tooling that catch them.

## Research

- [Independent AI security research](https://ppradyoth.web.app/research/): Full writeups of every disclosed finding across Notion AI, Meta AI, Priceline, Anthropic Claude Code, Reddit Answers, Brave Leo, Jack & Jill AI, Harvey Labs, and HackerOne — attack chains, impact, vendor response, disclosure timeline, and evidence exhibits where available. Includes a featured deep-dive on a hiring agent (Jack & Jill AI) fabricating a £100,000 job offer with UK visa sponsorship claims.

## Background

- [Homepage](https://ppradyoth.web.app/): Current role, work experience at JPMorganChase, side projects (Akrivon AI, Prompt Injection CTF, AgentInjectionBench, Credential Guard), skills, and education.
- [Speaking & teaching](https://ppradyoth.web.app/engagements/): Talks, workshops, and lectures on AI security and red teaming.

## Writing

- [Blog](https://ppradyoth.web.app/blog/): Articles on AI security, engineering, and the intersection of ML and cybersecurity, cross-posted from Medium.

## Contact

- Email: ppradyoth64@gmail.com
- LinkedIn: https://www.linkedin.com/in/ppradyoth/
- GitHub: https://github.com/ppradyoth

## Optional

- Weighted Safety Refusal (SSRN preprint): a severity-weighted, gaming-resistant metric for LLM refusal behavior. https://doi.org/10.2139/ssrn.6874522
- Prompt Injection CTF: an open-source red-teaming playground mapped to OWASP LLM Top 10 and MITRE ATLAS. https://github.com/ppradyoth/prompt-injection-ctf
- Credential Guard: an open-source runtime guardrail contributed to Anthropic's Claude Code that blocks agent tool calls from writing credentials to disk. https://github.com/anthropics/claude-code/pull/62099