Jing Qian
CivitasmassIndependent security researcher · Tokyo
I study how web applications and AI systems fail, and test where their safeguards hold.
Most of my work is finding authentication and authorization flaws in web applications, especially WordPress plugins, and testing how AI agents behave when the content they read is hostile.
My disclosures are published through Wordfence, WPScan, and the Python Software Foundation. I placed 10th in Gray Swan’s Indirect Prompt Injection Arena and 7th, with a gold medal, in Kaggle’s AI Agent Security competition, and I am a Kaggle Competitions Master. My graduate training is in statistics.
I’m open to selected AI red-teaming and security audit work: zzhhuuggee@gmail.com
Background
Elsewhere