Anthony Sai Richardo

• Conducted penetration testing across web and mobile applications (Android and iOS), APIs, networks, and infrastructure across 10+ projects for finance and banking clients.
• Identified and exploited vulnerabilities to demonstrate real-world attack paths, business impact, and security risks.
• Delivered technical security reports and presented findings to clients, providing evidence, risk ratings, exploitation details, and actionable remediation recommendations.
• Performed vulnerability retesting to validate remediation and confirm security improvements.

• Designed and developed cloud security CTF challenges across AWS, GCP, and Microsoft Azure.
• Engineer realistic attack chains involving IAM, privilege escalation, misconfigurations, service exploitation, and cloud-native vulnerabilities.
• Tested and reviewed challenges for exploitability, technical accuracy, difficulty, and solution integrity.
• Refined challenge infrastructure and solutions to ensure reliability, realism, and a consistent player experience.

• Conducted web, API, and mobile penetration testing across 10+ client projects in the finance, banking, fintech, and education sectors, contributing to 50+ security assessment mandays using OWASP WSTG and MASTG methodologies.
• Developed 3+ internal security tools using Next.js, Node.js, Python, MongoDB, and Docker to streamline security assessment workflows.

A distributed uptime monitoring platform with fault tolerant workers, HTTP and TCP health checks, webhook notifications, and real-time dashboards. Optimized for self-hosted deployments with scalable monitoring, low resource usage, and high availability.

An AI storytelling platform with semantic retrieval, adaptive memory, world simulation, and persistent multi-character interactions powered by modern LLM infrastructure. Custom memory and retrieval pipelines maintain long context, character consistency, and dynamic world evolution across conversations.

A web-based quantitative stock portfolio platform for the Indonesian Stock Exchange (IDX) that integrates market data, portfolio analytics, optimization, and predictive modeling. Portfolio optimization uses Sharpe ratio and volatility metrics, GARCH-based volatility modeling, time series decomposition, and fundamental analysis. Prediction pipelines use LSTM and ARIMA, alongside DistilRoBERTa-based financial news sentiment analysis.

• Founded and led a red team research lab leveraging agentic AI to discover and analyze vulnerabilities across open-source software and bug bounty programs.

• Founded an Indonesian OSINT community focused on national and international CTF competitions.
• Led community participation in multiple OSINT competitions, achieving several national-level placements.

• Represented BINUS University in national and international CTF competitions specializing in Web Exploitation, Digital Forensics, and OSINT.
• Developed 25+ cybersecurity CTF challenges across 10+ competitions covering OSINT, web exploitation, digital forensics, cloud security, and AI attacks.