>
Everything earned on the Synack platform specifically, collected in one place — separate from the cross-platform career totals above.
Cumulative Synack reputation points, reflecting seven years of consistent, trusted engagement quality.
Verified vulnerabilities reported directly through Synack Red Team engagements.
Inducted to the Acropolis, class of 2021 — the platform's highest researcher distinction.
Named a Synack Hero every consecutive year from 2021 through 2026.
Speed awards for landing 15 valid vulnerabilities in 15 days — twice over, in 2021 and 2022.
Continuous service on the Synack Red Team since 2019 — still active today.
MD Yeasir Arafat is a Bangladeshi offensive security researcher now based in Kuala Lumpur, Malaysia, working continuously on the Synack Red Team since 2019 — the invite-only crowdsourced platform where the world's vetted researchers stress-test enterprise environments. Over that time he has assessed 2,000+ client environments and reported more than 10,000 vulnerabilities.
He holds Synack Legend status, the platform's highest researcher distinction, and has been named a Synack Hero every year from 2021 through 2026. His work has also been formally acknowledged by Microsoft, Google, Apple, Dell, Nokia, Indeed, and Hackster through their respective vulnerability disclosure programs.
Beyond individual research, he is the co-founder of PentesterSpace, a Dhaka-based offensive security firm, where he helps mentor the next generation of Bangladeshi security researchers.
A running record of platform recognitions and milestones, kept in the same format Arafat reports vulnerabilities in: an ID, a status, and the evidence behind it.
Named to the 2021 Acropolis induction class — Synack's highest researcher distinction, reserved for a small group proven across years of engagements.
▸ Open sourceAwarded the Hero distinction every year from 2021 through 2026 for sustained, high-severity contributions to client engagements.
▸ Open sourceHit Synack's 15-valid-vulnerabilities-in-15-days benchmark in both 2021 and 2022 — one of the platform's toughest velocity awards.
▸ Open sourceCrossed 110k in cumulative Synack reputation, reflecting seven years of consistent, trusted engagement quality on the platform.
▸ Open sourceSurpassed 10,000 reported vulnerabilities across all engagements and disclosure programs, spanning critical, high, and chained findings across web, mobile, and infrastructure targets.
▸ Open profileOf that career total, more than 1,200 verified vulnerabilities were reported directly through Synack Red Team engagements — the core driver behind the 110,000+ reputation score.
▸ Open profileCompleted continuous security assessments for more than 2,000 organizations through Synack's crowdsourced engagement model.
▸ Open profileRecognized in Google's Hall of Fame for reported vulnerabilities, ranking #141 globally and #1 among Bangladeshi researchers at time of listing.
▸ Open profileCredited in Apple's web server security acknowledgments, January 2022, alongside researchers from around the world.
▸ Open profileCo-founded the Dhaka-based offensive security firm; the team went on to win the BASIS National ICT Award 2020 for Cyber Security Solutions.
▸ Open profileFormal recognitions from vulnerability disclosure and bug-bounty programs across major vendors.
Co-founded to give Bangladeshi organizations access to hands-on offensive security testing, PentesterSpace has grown into a recognized name in the local industry — and a training ground where Arafat mentors newer researchers.
For assessments, red-team work, or just to talk shop — reach out through any of the channels below.
Assessments. Red-team work. Or just talk shop. Insert coin and press start.
Copy the address, or open it in Gmail or your mail app.