Portrait

Anthony Sai Richardo

I find attack paths in systems, then prove what adversaries can do.

Contact me
01Experience03 roles

Experience

Professional work in cyber security.

  1. Aug 2026 to Present

    Current

    Jakarta, Indonesia

    Cyber Security Consultant

    Undisclosed

    • Penetration tested web and mobile apps (Android and iOS), APIs, networks, and infrastructure on 10+ finance and banking projects.
    • Exploited vulnerabilities to show real attack paths and business impact.
    • Delivered reports with evidence, risk ratings, and remediation guidance, then retested fixes.

  2. Jul 2025 to Jul 2026

    Remote

    Challenge Outsourcer

    Hack The Box

    • Built cloud security CTF challenges across AWS, GCP, and Azure.
    • Designed attack chains covering IAM, privilege escalation, misconfigurations, and cloud-native flaws.
    • Tested challenges for exploitability, accuracy, difficulty, and reliability.

  3. Feb 2025 to Feb 2026

    Jakarta, Indonesia

    Penetration Tester Intern

    ITSEC Asia

    • Web, API, and mobile penetration testing on 10+ finance, banking, fintech, and education projects: 50+ mandays using OWASP WSTG and MASTG.
    • Built 3+ internal assessment tools with Next.js, Node.js, Python, MongoDB, and Docker.
02Publications04 entries

Publications

Disclosures, papers, and talks.

Findings

01 disclosure

  • CVSS

    10.0

    floci-io/floci

    ECS host bind-mount to Docker-host RCE

    An unauthenticated ECS RegisterTaskDefinition plus RunTask bind-mounts the Docker host filesystem read-write and runs commands as root on the host.

    Read the disclosure(opens in a new tab)
03Awards05 results

Awards

Competitions and placements.

  • Jun 2025

    1st place:

    GKSK#9 OSINTATHON CTF, ITB STIKOM Bali

  • Sep 2023

    1st place:

    Hack Today CTF 2023, IPB University

  • May 2024

    2nd place:

    GKSK#8 OSINTATHON CTF, ITB STIKOM Bali

  • Nov 2025

    Finalist:

    Schematics CTF 2025, Institut Teknologi Sepuluh Nopember

  • Oct 2023

    Finalist:

    Hology 6.0 CTF, Universitas Brawijaya

04Projects05 builds

Projects

Side projects and open source contributions.

  1. Sep 2026

    fly-rg

    A closed-loop rhythm player that drives maimai-style charts with a fruit-fly connectome. The browser keeps chart audio and video local and sends only the Simai chart to a Python server, which steps the fly brain and scores hits on a DX sensor cabinet.

    View fly-rg on GitHub (opens in a new tab)

  2. May 2026 to Present

    Current

    Leoniq

    Distributed uptime monitoring with fault tolerant workers, HTTP and TCP health checks, webhook notifications, and real-time dashboards. Built for self-hosting with low resource usage and high availability.

    View Leoniq on GitHub (opens in a new tab)

  3. Aug 2025 to Present

    Current

    Myrion

    An AI storytelling platform with semantic retrieval, adaptive memory, world simulation, and persistent multi-character interactions. Custom memory and retrieval pipelines keep long context and characters consistent.

  4. Aug 2024 to Feb 2026

    Fake Lossless Checker

    A Python tool that checks whether lossless audio files are authentic by analyzing their frequency content and dynamic range. It ships a base CLI and a multithreaded CLI.

    View Fake Lossless Checker on GitHub (opens in a new tab)

  5. Aug 2024 to Dec 2024

    OpenIDX3

    A quantitative portfolio platform for the Indonesian Stock Exchange (IDX) combining market data, analytics, and optimization with Sharpe ratio, volatility metrics, and GARCH modeling. Predictions use LSTM and ARIMA, with DistilRoBERTa news sentiment.

    View OpenIDX3 on GitHub (opens in a new tab)
05Education

Education

Formal studies.

06Organizations03 groups

Organizations

Communities I'm part of.

  1. Jun 2026 to Present

    Current

    Remote

    Founder

    Kyaxris

    • Founded a red team research lab using agentic AI to find vulnerabilities in open-source software and bug bounty programs.

  2. Jun 2024 to Present

    Current

    Remote

    Founder

    Koalisi OSINT Indonesia (KOID)

    • Founded an Indonesian OSINT community for national and international CTFs, with several national-level placements.

  3. Jul 2023 to Present

    Current

    Indonesia

    Team Member

    PETIR Cyber Security

    • Represented BINUS University in national and international CTFs: web exploitation, digital forensics, and OSINT.
    • Wrote 25+ CTF challenges for 10+ competitions across OSINT, web, forensics, cloud, and AI attacks.
07Certifications09 credentials

Certifications

Credentials and toolbox.

  • CyberWarFare Labs

    04

    • Certified AWS Red Team Specialist (CARTS)
    • Certified API Red Team Analyst (API-RTA)
    • Multi-Cloud Red Team Analyst (MCRTA)
    • Multi-Cloud Blue Team Analyst (MCBTA)

  • The SecOps Group

    02

    • Certified Cloud Security Practitioner, AWS (CCSP-AWS)
    • Certified AppSec Practitioner (CAP)

  • NVIDIA

    01

    • Deep Learning Workshop

  • ID-Networkers

    01

    • Cisco Bootcamp Scholarship

  • Dicoding

    01

    • DevOps Scholarship

Toolbox

06 disciplines
Programming
Python, TypeScript, JavaScript, Bash, Solidity
Development
Next.js, Node.js, Flask, Tailwind CSS, PostgreSQL, MongoDB
Offensive security
Burp Suite, Nmap, Frida, SQLMap
Forensics
Wireshark, Volatility, Autopsy
Infrastructure
Docker, NGINX, Ansible, Prometheus, Grafana, Jenkins
Cloud
AWS, GCP, Azure, Cloudflare, GitHub Actions, Vercel, Supabase

08Contact

Let’s talk.

Have any questions or want to work together?

Contact meGitHubBlog