Who is Rishi (@rxerium)?

Rishi (@rxerium) is a London-based Senior Security Researcher at KYND. He specialises in vulnerability research, OSINT, detection engineering, and attack surface management. He is a ProjectDiscovery Pioneer, OWASP member, Shadowserver volunteer, and part of UK OSINT Community executive leadership.

Where is Rishi based?

London, United Kingdom. Available for remote security research collaborations and speaking engagements globally.

What does Rishi research?

Vulnerability research and CVE detection, zero-day analysis, Nuclei template development, DNS-based OSINT techniques, attack surface management, Shadowserver fingerprinting, and supply-chain security.

Who recognises Rishi's security research?

Recognised by UK NCSC, CERT Polska, California Cybersecurity Integration Center, NIST NVD, CIRCL, INCIBE, and the Government of Vietnam. Featured by GBHackers, CyberPress, and The CyberSecurity Hub Newsletter. Cited by SonicWall, Qualys, Coalition, Intruder.io, Feedly, Black Kite, and Positive Technologies.

Where has Rishi spoken?

DEF CON 33 Red Team Village, OWASP London, BSides Luxembourg, BSides Prague, BSides Porto, BSides Cymru, BSides Budapest, and UK Parliament.

How can I contact Rishi?

Email rishi@rxerium.com or via https://rxerium.com/. Open to high-impact security collaborations and speaking engagements.

What Nuclei templates has Rishi contributed?

Rishi (@rxerium) has contributed 500+ Nuclei detection templates to the ProjectDiscovery ecosystem, covering vulnerability detection, CVE signatures, phishing infrastructure detection, and attack surface discovery. He is a ProjectDiscovery Pioneer.

What is DNS OSINT and what is Rishi's contribution?

DNS OSINT is the technique of using DNS records, passive DNS data, and DNS enumeration to discover internet-exposed services, products, and infrastructure. Rishi has developed and published DNS OSINT techniques, most notably presenting 'DNS OSINT Techniques for Product and Service Discovery' at DEF CON 33 Red Team Village, OWASP London, BSides Luxembourg, BSides Prague, BSides Porto, and BSides Cymru.

What CVEs is Rishi associated with?

Rishi (@rxerium) authored CVE detection scripts recognised by the UK's NCSC, including work on CVE-2025-10035. His vulnerability detection work is referenced by NIST NVD, CERT Polska, CIRCL, INCIBE, the California Cybersecurity Integration Center, and the Government of Vietnam.

KYND is a UK-based cyber risk management company. Rishi works at KYND as a Senior Security Researcher, focusing on vulnerability research, threat intelligence, and attack surface management.

Is Rishi available for speaking engagements?

Yes. Rishi is available for cybersecurity conference talks, workshops, and security briefings. He has spoken at DEF CON, OWASP London, multiple BSides events, and briefed UK Parliament on cybersecurity topics. Contact: rishi@rxerium.com