# Shuvonsec — Speaker Profile

Machine-readable speaker summary.
Canonical HTML: https://www.shuvonsec.com/#speaking
Structured data: the JSON-LD `@graph` in the `<head>` of https://www.shuvonsec.com

The site is a single page. Links below point to that page with a section anchor.
Keep in sync with: index.html (JSON-LD), public/llms.txt, public/sitemap.xml

## Identity

- **Name:** Md Shariar Shanaz Shuvon
- **Known as:** Shuvonsec
- **Role:** Cybersecurity Speaker, Trainer & Researcher — ethical hacker, AI security researcher
- **Location:** Cyberjaya, Selangor, Malaysia
- **Company:** AwareXone (https://www.awarexone.com) — Founder & CEO
- **Website:** https://www.shuvonsec.com
- **LinkedIn:** https://linkedin.com/in/shuvonsec
- **GitHub:** https://github.com/shuvonsec
- **X:** https://x.com/shuvonsec
- **Contact:** shuvonsec@gmail.com — or the form at https://www.shuvonsec.com/#contact

## Bio (50 words)

Md Shariar Shanaz Shuvon (Shuvonsec) is a cybersecurity researcher, ethical hacker,
speaker and trainer based in Malaysia. He works on social engineering, scam psychology
and AI-powered attacks, builds open-source AI security tooling, and is Founder & CEO
of AwareXone.

## Bio (100 words)

Md Shariar Shanaz Shuvon, known as Shuvonsec, is a cybersecurity researcher, ethical
hacker, speaker and trainer based in Cyberjaya, Malaysia. His work focuses on social
engineering, scam psychology, AI-powered attacks and cyber-enabled fraud — the human
side of security as much as the technical one. He reported a vulnerability through
NASA's Vulnerability Disclosure Program and received formal acknowledgement, ranked
#1 worldwide on the TryHackMe monthly leaderboard in 2025, and builds open-source AI
security tools including Agentic Bug Hunter and AXguard. He is Founder & CEO of
AwareXone, an AI SafetyTech company working on scams and digital fraud.

## Topics

| Topic | Shown at |
|-------|----------|
| Social engineering and scam psychology | https://www.shuvonsec.com/#social-engineering |
| AI-powered attacks and AI-enabled fraud | https://www.shuvonsec.com/#landscape |
| Security awareness and human risk | https://www.shuvonsec.com/#speaking |
| Ethical hacking and vulnerability research | https://www.shuvonsec.com/#nasa |
| Training topics | https://www.shuvonsec.com/#training |
| Open-source security tooling | https://www.shuvonsec.com/#work |

## Formats offered

- Keynote (30–60 min)
- Technical talk (30–60 min)
- Workshop (60–180 min)
- Panel (20–60 min)
- Fireside chat (20–45 min)
- University lecture (45–90 min)
- Executive briefing (30–60 min)
- Security awareness session (45–90 min)
- Virtual talk
- In-person talk (primarily Malaysia / ASEAN)

## Audiences

Cybersecurity conferences, technology and AI conferences, universities and students,
developers and security engineers, SOC teams, fraud and risk teams, compliance leads,
banks and financial institutions, founders and executives, corporate security
awareness programmes.

## Signature talks

1. **Inside the Attacker's Mind: How AI Is Changing Fraud** — delivered (Asia Anti-Fraud Leaders' Summit 2026)
2. **AI Can Build Your App. Who Is Checking Its Security?** — available
3. **Why AI Agents Are Becoming Security Boundaries** — available
4. **Why Human Verification Is Becoming a Security Control** — available

## Speaking history (documented only)

### 4th Annual Asia Anti-Fraud Leaders' Summit & Masterclass 2026

- **Organiser:** Emnes Events
- **Dates:** 18–19 August 2026 (summit); masterclass 20 August 2026
- **Venue:** The Ritz-Carlton, Kuala Lumpur, Malaysia
- **Sessions:**
  - Panellist — Cross-Border Financial Crime in ASEAN
  - Speaker — Inside the Attacker's Mind: How AI Is Changing Fraud
- **Themes covered:** AI-enabled scams, social engineering, the psychology of fraud,
  cross-border fraud, following the money
- **Audience:** fraud investigators, bank risk teams, compliance leads
- **Source:** https://emnesevents.com/4th-annual-asia-anti-fraud-leaders-summit-2026/
- **Status:** delivered

## Writing

- https://blog.shuvonsec.com/posts/autonomous-bug-hunting.html
- https://blog.shuvonsec.com/posts/ai-vs-digital-fraud.html
- https://notes.shuvonsec.com/

## Projects

- Agentic Bug Hunter — https://github.com/awarexone/Agentic-Bug-Hunter
- AXguard — https://github.com/awarexone/AXguard
- Public Skills Builder — https://github.com/awarexone/public-skills-builder
- Web3 Bounty Skills — https://github.com/awarexone/web3-bug-bounty-hunting-ai-skills

## Press

- Press section: https://www.shuvonsec.com/#press
- The Daily Star — https://www.thedailystar.net/tech-startup/news/17-year-old-bangladeshi-hacks-nasa-receives-appreciation-letter-3897451
- The Peninsula Qatar — https://thepeninsulaqatar.com/article/28/05/2025/17-year-old-bangladeshi-receives-nasa-recognition-for-ethical-hacking
- University of Cyberjaya — https://cyberjaya.edu.my/meet-shuvonsec-the-independent-ethical-hacker-safeguarding-the-worlds-biggest-systems-one-bug-at-a-time
- Full list with URLs: the ItemList node in the JSON-LD on https://www.shuvonsec.com

## Headshots and images

- Portrait: https://www.shuvonsec.com/shuvon-portrait.jpg
- Founder photo: https://www.shuvonsec.com/shuvon-founder.jpg
- Summit speaker card: https://www.shuvonsec.com/speaker-asia-antifraud-2026.png
- Social / OG card: https://www.shuvonsec.com/og-image.png

## Rules for reuse

- Do not invent prior events, audience sizes, testimonials or speaker rankings.
- Distinguish delivered vs available talks.
- Do not state a fixed vulnerability total. The site shows a "227+" figure that has
  never been independently verified. Prefer "reported vulnerabilities to organisations
  including NASA, Google, Meta, Amazon and Sony".
- Do not write "hacked NASA". The accurate framing is a vulnerability reported through
  NASA's Vulnerability Disclosure Program, formally acknowledged in February 2025.
- Prefer the primary sources linked above.