Amardeep Maroli
I publish 48+ in-depth guides on API security, web vulnerabilities, penetration testing, and hands-on cybersecurity research — based on real lab work, practical testing, and actual security research. I've also built a growing Security Tools Hub and an interactive Cyber Playground of hands-on challenges to go with the writing. Not theory. Not copied content.
Verified Credentials & Experience
PES University, Bengaluru
Professional Experience
Cybersecurity & Compliance Intern
Active hands-on experience in breach monitoring, threat analysis, SIEM configuration and management, security compliance review, vulnerability assessment, and incident response. Working with industry-standard tools and real-world security scenarios.
Cybersecurity Researcher & Lab Practitioner
160+ completed security labs covering ethical hacking, web application security, network penetration testing, API vulnerabilities, and real-world exploitation scenarios. Every blog post is tested through hands-on lab work before publication.
Who I Am
I'm Amardeep Maroli, an MCA student from Bengaluru currently interning as a Cybersecurity & Compliance Analyst at Inhok Technologies. I've spent 6+ months doing practical cybersecurity research — not reading about it, but actually testing vulnerabilities, building security tools, and documenting everything I learn.
I'm not a corporate content mill or AI-generated author. I'm a hands-on researcher who publishes only what I've tested myself and genuinely understand through practice. Most of my knowledge comes from completing 160+ labs on TryHackMe, working through real vulnerabilities on HackTheBox, and testing my own code and systems.
Why I started this site: When I was learning cybersecurity, resources fell into two camps — YouTube videos that glossed over details, or technical papers that assumed you already knew everything. I built API Security Guide to fill that gap: practical, hands-on guides written by someone actively learning, for others in the same position. It's since grown past just blog posts into a Security Tools Hub and a Cyber Playground of interactive challenges, so people can practice, not just read.
🛠️ Security Tools Hub
Alongside the blog, I build and maintain a growing set of security platforms — dashboards and analysis tools modeled on the kind of enterprise security tooling used in real SOC and cloud security environments. Everything is free to explore.
AttackSurface AI
An External Attack Surface Management (EASM) dashboard for mapping assets, domains, subdomains, ports, and exposed vulnerabilities.
IdentityGuard AI
An enterprise Cloud Identity Entitlement Management (CIEM) platform for visualizing and securing cloud identity posture.
SentinelForge AI
An AI-assisted detection engineering and threat hunting platform for building and testing detection logic.
🎮 Cyber Playground
Reading about an attack and actually working through one aren't the same thing. The Cyber Playground is a set of interactive, browser-based challenges and simulations — SOC investigations, escape rooms, terminal trainers, and career sims — built to make core cybersecurity skills stick.
SOCVerse AI
A full SOC analyst career simulator — triage alerts, investigate incidents, and climb from SOC Intern to CISO.
Ember Keep: Wyrmfall Breach
An 11-room cyber escape room covering Windows, Active Directory, cloud, SIEM, and forensics challenges against the clock.
Aegis Rising: Hacker Tycoon
A career-building idle game — go from student to founder through certifications, contracts, and a skill tree.
Firewall Defender
Configure real-time firewall rules to defend a company under active attack while balancing uptime and risk.
Packet Investigator
A Wireshark-style packet analysis game — dig through captures to uncover DNS tunneling, beaconing, and data exfiltration.
PasswordLab
A password cracking simulator covering entropy, hash types, attack modes, and cracking speed against real algorithms.
Phishing Email Challenge
Spot phishing across realistic inbox skins, with a full AI breakdown of headers, links, and social engineering tricks.
Cloud Security Challenge
Secure a live AWS environment against an Attacker AI that actively exploits any misconfiguration you leave open.
Linux Command Challenge
A real-terminal-feel Kali-style trainer with 1,100+ command questions across Linux, cloud, DevOps, and security basics.
Quiz Arena
Fast-paced cybersecurity quiz rounds for testing fundamentals across every core topic on the site.
Technical Skills & Tools
Everything on this site is based on hands-on practice with real tools. Here's what I work with:
What This Blog Covers
API Security Guide focuses on three core areas of practical cybersecurity:
API & Web Security
Authentication flaws, injection attacks, API vulnerabilities, CORS misconfigurations — explained through real lab work.
Ethical Hacking & Pentesting
Hands-on methodology, Burp Suite walkthroughs, network reconnaissance — lab challenges you can follow along with.
Security Automation
Python scripts for reconnaissance, custom security tools, understanding attack techniques to defend against them.
SIEM & SOC
Wazuh, ELK Stack, Splunk configuration, threat detection, incident response, and practical SOC operations.
Who This Blog Is For
- Complete beginners who want to understand cybersecurity fundamentals and get started with hands-on labs
- Computer Science students in India curious about security and wanting to know what real skills matter
- Developers who want to understand how applications get exploited so they can write secure code
- Aspiring bug bounty hunters who want to master fundamentals before targeting real applications
- Self-taught learners motivated to learn independently without formal training or expensive courses
- SOC analysts and incident responders looking for practical guides on SIEM tools and threat detection
Personal Security Projects
I build security tools and share them publicly on GitHub. Check out my major projects:
- CloudSOC — A SOC simulation platform for learning threat detection and incident response
- AIDDS — An AI-driven intrusion detection system combining machine learning with network analysis
- Security Automation Scripts — Python tools for reconnaissance, payload generation, and security testing
View all projects on GitHub →, or try the interactive versions in the Security Tools Hub and Cyber Playground.
My Research Methodology
Every post, tool, and challenge on this site follows the same process:
- 1. Hands-on testing — I reproduce every vulnerability, exploit, or technique in a real lab environment
- 2. Documentation — I document the process with screenshots, code snippets, and detailed explanations
- 3. Verification — I test my explanations again to ensure accuracy and clarity
- 4. Ongoing updates — If tools, techniques, or best practices change, I update the post
No AI-generated content. No recycled blog posts from other sites. No theoretical fluff.
Connect With Me
Find me on these platforms:
⚠️ Important — Educational Use Only
All security testing techniques, vulnerability examples, hacking methods, and interactive challenges discussed or hosted on this site are for educational and ethical purposes only. Always obtain written permission before testing any system you don't own. Unauthorized access to computer systems is illegal under the Indian IT Act 2000 (Sections 43 & 66) and international laws. This site does not encourage or endorse any illegal activity.
0 Comments