Mert Tasci
Bug Bounty Hunter at Bugcrowd
Istanbul, Türkiye Turkey
Summary
👤
Senior🎓
Top SchoolMert Tasci is an experienced application security researcher and top-ranked bug bounty hunter from Istanbul with 11 years in offensive security and attack development. Currently #1 for P1 & P2 on Bugcrowd and #2 overall, he has reported over 3,800 valid vulnerabilities—including 500+ critical issues—across 700+ organizations, demonstrating exceptional scale and impact. His background spans red teaming at Picus, application security R&D, and hands-on software development, giving him a rare blend of developer insight and adversarial creativity. Mert is known for turning complex attack techniques into repeatable findings and tooling, and he often uncovers high-impact zero-day classes that others miss.
11 years of coding experience
6 years of employment as a software developer
Bilgisayar Mühendisliği, Bilgisayar Mühendisliği at Sakarya Üniversitesi
Stackoverflow
21reputation
2kreached
1answer
0questions
Github Skills (22)
video-editing10
animation9
gif9
hammer9
gun9
video-processing9
html8
pentest8
python8
http8
web-application8
penetration-testing7
security7
csrf7
fault-injection7
Programming languages (6)
Github contributions (5)
merttasci/csrf-poc-generator
Jun 2016 - Jul 2017
this html file creates a csrf poc form to any http request.
Contributions:5 commits, 1 PR, 4 pushes in 1 year 1 month
csrf
merttasci/weapons4pentester
Jun 2016 - Dec 2016
:hocho: this repo contains required files for web application pentests
Contributions:26 commits, 1 PR, 27 pushes in 5 months
hammergunsecuritypentestsyringe
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.