
I run the operation and write the software it runs on.
Fayad K. Hassan: operations and systems lead, security researcher credited by Google, Nokia and Tesla.
Credited by Google, Nokia, Tesla, SpaceX, and 4 moreKeeper Security, Mattermost, Privy and UK Health and Safety Executive
The drawing is generated from my security disclosure record, one rule for each vendor that credited the work. See the record
Three parts of one job
In all of it, the work is finding where what a system reports and what it is actually doing stop being the same thing.
Systems I have built
Systems an operation depends on the next morning.
Operations
Dispatch and Fleet Platform
The website and back office King Heavy Equipment runs on: instant-quote capture, customers, e-signed contracts, bookings and live John Deere telematics as one connected set of records.
-
Operations
Load Profitability Reporting for an Interstate Carrier
-
Integration
John Deere Telematics Integration
-
OSINT
Storytime, a Cross-Platform OSINT Timeline
-
Web app
This Site and the CMS Behind It
-
Web app
A Family Tree for a Whole Village
- All workEvery system, with its case study
Credited by the vendors themselves
Each finding went through the vendor’s own programme and was acknowledged publicly.
| Vendor | Channel | Outcome |
|---|---|---|
| Vulnerability Reward Program | Hall of Fame | |
| Nokia | Coordinated Vulnerability Disclosure | Hall of Fame |
| Tesla | Bugcrowd | Hall of Fame |
| SpaceX | Bugcrowd | Hall of Fame |
| Keeper Security | Bugcrowd | Hall of Fame |
| Mattermost | Bugcrowd | Hall of Fame |
| Privy | HackerOne | Resolved, paid |
| UK Health and Safety Executive | HackerOne | Credited |
On Sudanese television
Two interviews, on Sudania 24 and Sudan National TV, about student access and rights after Sudan’s revolution. Both in Arabic.
Watch the interviewsSelected essays and field notes
Open source intelligence, conflict, the technology I build with, and how people behave around all three.
Zero for Eight: What History Says About the Nuclear Scare Over Iran
The nuclear risk that does repeat is slower, and it starts with 440 kilograms of uranium nobody outside Iran has seen in more than a year.
Politics18 min
26 Sep 2026
An OSINT Tool Should Show Its Working
Storytime 2.1 is a free, self-hosted OSINT platform. It reads public sources only, runs a local agent that has to cite every claim it makes, and seals what it collects so the evidence can be checked later.
OSINT9 min
9 Aug 2025
A $10K OSINT Red-Team Against a Simulated Intelligence Network
A tabletop red-team against a fictional joint-intelligence network, run on open-source material and a small budget.
OSINT8 min

Tell me what isn’t adding up
An operation that has outgrown its spreadsheets and phone calls, a system that says one thing while the business does another, or a security or OSINT question. I read every message myself.
Or write directly to fayad_k@outlook.com
