Sayaan Alam (@ehsayaan) header
Sayaan Alam (@ehsayaan) profile picture

Sayaan Alam

@ehsayaan

founding security @parameter_ai (YC W26), infosec nerd popping calc ; views are my own.

sayaan.in
Joined April 2017
  • Tweets2.6K
  • Following996
  • Followers9.4K
136Media
Photo by Sayaan Alam (@ehsayaan)Photo by Sayaan Alam (@ehsayaan)Photo by Sayaan Alam (@ehsayaan)Photo by Sayaan Alam (@ehsayaan)Photo by Sayaan Alam (@ehsayaan)Photo by Sayaan Alam (@ehsayaan)Photo by Sayaan Alam (@ehsayaan)Photo by Sayaan Alam (@ehsayaan)Photo by Sayaan Alam (@ehsayaan)Photo by Sayaan Alam (@ehsayaan)
Do listen guys!!! Thanks for the opportunity @synack
Synack (@synack) profile pictureSynack
@synackApr 3
New episode of WE'RE IN! Discover @ehsayaan's journey from teenage hacker to the SRT Acropolis. 🎧Listen on Spotify: open.spotify.com/episode/2Oi… #EthicalHacking #Pentest #SynackRedTeam #Cybersecurity
Image from Synack (@synack)
1
3,775
🚨 OpenAI fixed a ChatGPT flaw that allowed malicious shared links to execute attacker code in users' logged-in sessions and steal private chat content. Researchers demonstrated the attack. Here's how → thehackernews.com/2026/10/a-…
A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats

A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats

OpenAI fixed a P1 ChatGPT flaw that let malicious shared links execute code in signed-in sessions and access private conversations.

thehackernews.com
30
36
9
147
30,947
We hacked ChatGPT at @Parameter_ai. Opening a malicious shared ChatGPT link could leak your private chats and compromise your ChatGPT account. The link looked like a shared conversation. Opening it could run attacker-controlled code in your signed-in session, giving it access to chats you’d never shared. OpenAI rated the issue as P1 and promptly patched it. Full write-up: parameter.ai/labs/we-found-a…
Do the Math: How We Took Over ChatGPT Accounts - Parameter

Do the Math: How We Took Over ChatGPT Accounts - Parameter

By bypassing ChatGPT's sandbox and content security policy, our research team was able to take over anyone's account simply by sending them a link.

parameter.ai
4
10
65
4,042
Sayaan Alam retweeted
Parameter (@parameter_ai) profile picture
Parameter
@parameter_aiOct 30
We hacked ChatGPT (using ChatGPT). We demonstrated that a single shared link could take over the account of anyone who opened it: private chats, files, settings, all of it. OpenAI rated it P1 and fixed it Oct 26.
23
40
14
339
41,254
Something big is dropping at @parameter_ai 👀
1
2
12
897
Sayaan Alam retweeted
Parameter (@parameter_ai) profile picture
Parameter
@parameter_aiOct 16
Introducing Watchtower, our take on external attack surface management. Give it a domain and watchtower maps your internet-facing assets, shows where they’re hosted, and tracks what’s new, changed, or gone.
1
4
8
548
Sayaan Alam retweeted
Parameter (@parameter_ai) profile picture
Parameter
@parameter_aiOct 16
Introducing Windows application pentesting. Our AI agent can now test your app the way an attacker would: local storage, network traffic, and access controls.
3
3
10
930
we at parameter are growing fast ASF and we need a really cracked eng whom are all of the following: * smarter than me * knows more shit than me * doesn't write AI slop we are going to pay you good 🤤 and you can potentially make generational wealth.
6
5
1
43
2,258
Sayaan Alam retweeted
Parameter (@parameter_ai) profile picture
Parameter
@parameter_aiSep 12
We’re bringing Parameter to GISEC GLOBAL in Dubai, 16-18 September. Our first show in the region. Come see what continuous autonomous pentesting looks like. 📍 Booth SP60, Startup Zone, Hall 1 Security leaders in the region, come say hi!
3
1
12
1,620
Sayaan Alam retweeted
Parameter (@parameter_ai) profile picture
Parameter
@parameter_aiSep 10
Introducing Pentesting for Android. As companies expand their digital footprint, their attack surface grows too. Native mobile apps are often overlooked in security testing, leaving vulnerabilities undiscovered. If you're building an Android app, we'd love to show you what we can do.
1
6
1
16
2,557
Sayaan Alam retweeted
Parameter (@parameter_ai) profile picture
Parameter
@parameter_aiSep 10
Introducing Parameter v1.6. A refined interface, a more powerful pentesting harness, expanded PR security review, and pentesting for Android, iOS, and watchOS. Here’s what’s new ↓
7
7
3
37
21,467
giving @claude private lessons!! promising student, but it keeps billing me back 😭
Image from Sayaan Alam (@ehsayaan)
1
11
1,867
Astra?
ChatGPT (@ChatGPT) profile pictureChatGPT
@ChatGPTSep 3
The stars are almost aligned.
1
798
the team is GROWING @parameter_ai
Image from Prama Yudhistira (@menace_codes)
7
3
2
47
13,477
Sayaan Alam retweeted
Parameter (@parameter_ai) profile picture
Parameter
@parameter_aiAug 9
We bet we can hack you. We've built the world's best AI hackers that continuously monitor web applications for security vulnerabilities. Book your first pentest.

4
11
263,894
Attending Black Hat? Come to Booth #5701 and see our agent in action that has found critical vulnerabilities in some of the world’s largest organizations.
Parameter (@parameter_ai) profile pictureParameter
@parameter_aiAug 4
We're at Black Hat this week. Broken benchmarks, broken status quos, and hundreds of critical severity responsible disclosures filed in the past few months. Booth 5701, Startup City. Come say hi.
2
8
909
Sayaan Alam retweeted
Parameter (@parameter_ai) profile picture
Parameter
@parameter_aiAug 4
We're at Black Hat this week. Broken benchmarks, broken status quos, and hundreds of critical severity responsible disclosures filed in the past few months. Booth 5701, Startup City. Come say hi.
2
5
2
18
67,191
Very true! There’s no right age to start, build skills, start doing things you love and be the youngest at the table!!! Let your work and skills speak for you!! speaking from experience :)
Garry Tan (@garrytan) profile pictureGarry Tan
@garrytanJun 17
Harshita Arora was 17 when she cofounded AtoB and got into YC. I was 27 when I cofounded Posterous and got into YC. Nicolas Dessaigne was 37 when he cofounded Algolia and got into YC It doesn’t matter what age you are. YC is the community to join to go fast when starting.
7
1,048
Sayaan Alam retweeted
Garry Tan (@garrytan) profile picture
Garry Tan
@garrytanJun 17
Harshita Arora was 17 when she cofounded AtoB and got into YC. I was 27 when I cofounded Posterous and got into YC. Nicolas Dessaigne was 37 when he cofounded Algolia and got into YC It doesn’t matter what age you are. YC is the community to join to go fast when starting.
105
60
16
1,677
159,789
Fable 5!!!
1
341
Finally my friend @Dinosn coming to India, can’t miss this edition!!!
Security BSides Ahmedabad (@bsidesahmedabad) profile pictureSecurity BSides Ahmedabad@bsidesahmedabadMay 21
The people shaping the global cybersecurity community aren’t just building defenses. They’re building the culture around hacking itself. 🔥 We’re excited to welcome @Dinosn as a Keynote Speaker for BSides Ahmedabad 0X07. Straight from Swiss 🇨🇭, Nicolas is widely known as a hacker, community-driven security professional, and one of the most influential voices on X within the cybersecurity space. He is currently the Head of Threat & Vulnerability Management at @Henkel Recognized among the Top 23 cybersecurity influencers by @SentinelOne and featured in’s “200 Cybersecurity Influencers On Twitter Making a Difference,” by @CheckPointSW , Nicolas has built a reputation for connecting researchers, hackers, and defenders worldwide.🌍 He is also recognized with @SynackRedTeam Titan Recognition three times and Mentor of the Year honors for his contributions to the global security community. 🏆 Expect insights from someone who lives and breathes the hacker mindset every single day.🔥 Get ready for conversations that challenge perspectives and inspire the next generation of security researchers.⚔️ 🎟️Secure your spot now: secwiser.com/bsides-ahmedaba… #BSidesAhmedabad #cybersecurity #bugbounty #hacking #cybersecurity
Image from Security BSides Ahmedabad (@bsidesahmedabad)
5
650
Load more