Kapil Soni
Bug bounty hunter, penetration tester, and vulnerability researcher.
Kapil Soni has worked in information security since 2012. As a bug bounty hunter, penetration tester, and vulnerability researcher, he has reported security flaws to more than 250 organizations, including Apple, Adobe, Cisco, Amazon, AT&T, Mastercard, Walmart, Lenovo, and the U.S. Government.
He is the founder of Xowia Technologies, an information security company offering penetration testing, vulnerability assessment, and incident response. He built ToolWar, a long-running security tools resource, and Arsenly (formerly pentest.xowia.com), a platform for offensive security work. His articles have appeared in leading security publications including Hakin9 and eForensics Magazine, and he has delivered ethical hacking and cybersecurity workshops across India.
His books turn real engagement experience into hands-on guides. His current focus is AI security: prompt injection, RAG attacks, AI agents, and LLM red teaming, written for practitioners who want to break real systems and report findings that get paid.
- In information security since 2012
- Reported flaws to 250+ organizations
- Apple, Adobe, Cisco, Amazon, AT&T, Mastercard, Walmart, Lenovo, U.S. Government
- Founder, Xowia Technologies
- Creator of ToolWar and Arsenly
- Published in Hakin9 and eForensics Magazine
- Workshops across India on ethical hacking and cybersecurity
