Security Researcher and Offensive Security Engineer building open-source frameworks for AI/LLM security, protocol analysis, reverse engineering, protocol fuzzing, and stateful application testing.
My work focuses on designing offensive tooling, reproducible security research platforms, and implementation-driven research for modern software and AI systems.
π Chennai, India
- AI & LLM Security
- Offensive Security Engineering
- Stateful Application Security
- WebSocket & Protocol Security
- Coverage-Guided Fuzzing
- Reverse Engineering
- Exploit Development
- Adversarial Machine Learning
Evolutionary AI Red Teaming Framework for systematic security evaluation of Large Language Models.
Highlights
- Evolutionary prompt mutation
- Genetic algorithms
- Differential model testing
- OWASP LLM Top 10 attack modules
- Behavioral clustering
- Multi-model evaluation
Stateful WebSocket Security Assessment Platform for modern realtime applications.
Highlights
- Stateful replay engine
- Identity-aware testing
- Browser-assisted validation
- WebSocket interception
- Race condition analysis
- Authorization testing
- Evidence generation
Coverage-guided protocol fuzzing framework for binary and custom protocols.
Highlights
- Grammar-aware mutation
- Distributed fuzzing
- Coverage-guided execution
- Crash triage
- Corpus management
- Protocol parser framework
Cross-platform reverse engineering framework for binary analysis.
Highlights
- Static analysis
- CFG recovery
- Intermediate Representation
- SSA
- Native decompiler
- Embedded debugger
- Plugin SDK
- PoCSmith β AI-assisted Proof-of-Concept generation
- LockRoot β Secure credential vault
- SQL Tamper Framework β Intelligent SQL payload transformation
- Keikaku β Custom interpreted runtime
- RedLang β LLVM-based systems programming language
SSRN
https://papers.ssrn.com/sol3/papers.cfm?abstract_id=6373439
DOI
https://doi.org/10.2139/ssrn.6373439
Zenodo
https://doi.org/10.5281/zenodo.18909538
Citation
Regaan R. Basilisk: An Evolutionary AI Red-Teaming Framework for Systematic Security Evaluation of Large Language Models. SSRN Electronic Journal. 2026.
@article{regaan2026basilisk,
title={Basilisk: An Evolutionary AI Red-Teaming Framework for Systematic Security Evaluation of Large Language Models},
author={Regaan, R},
journal={SSRN Electronic Journal},
year={2026},
doi={10.2139/ssrn.6373439}
}Figshare
DOI (Figshare)
https://doi.org/10.6084/m9.figshare.32955467.v1
Zenodo
https://doi.org/10.5281/zenodo.21290858
Citation
Regaan, R. (2026). WSHawk: Stateful Security Assessment of WebSocket Applications through Adaptive Payload Mutation and Browser-Assisted Validation (Version 4.0.1). ROT Independent Security Research Lab. https://doi.org/10.5281/zenodo.21290858
@article{regaan2026wshawk,
author = {Regaan, R},
title = {WSHawk: Stateful Security Assessment of WebSocket Applications through Adaptive Payload Mutation and Browser-Assisted Validation},
year = {2026},
month = {7},
doi = {10.6084/m9.figshare.32955467.v1},
url = {https://figshare.com/articles/preprint/WSHawk_Stateful_Security_Assessment_of_WebSocket_Applications_through_Adaptive_Payload_Mutation_and_Browser-Assisted_Validation/32955467}
}- Go
- C
- C++
- Python
- TypeScript
- AI & LLM Security
- Web Security
- WebSocket Security
- Protocol Analysis
- Reverse Engineering
- Coverage-Guided Fuzzing
- Exploit Development
- Offensive Tooling
- Linux Internals
- LLVM
- TCP/IP
- Binary Analysis
- Virtual Machines
- Docker
- Redis
- PostgreSQL
- GitHub Actions
- Adversarial Machine Learning
- Prompt Evolution
- Model Evaluation
- LLM Security Testing
- Build systems that mirror real offensive workflows.
- Prioritize reproducibility over isolated findings.
- Treat evidence as a first-class output.
- Favor implementation-backed research over theoretical discussion.
- Release practical open-source tooling for the security community.
- Certified Ethical Hacker (CEH)
π Website
π’ Research Lab
π» GitHub
πΌ LinkedIn
https://linkedin.com/in/regaan
π X (Twitter)
All research is performed in authorized environments for defensive security evaluation, education, and responsible disclosure.

