mohdarif.com

What It Is

mohdarif.com is the personal security engineer homepage of Mohammad Arif. It primarily presents his experience in product security, application security, cloud security, secure SDLC, and AI/ML security. The site is not positioned as a conventional cybersecurity software or SaaS product; it is more of a professional capability profile for employers, partners, and the security community.

Core Capabilities and Protection Areas

Based on the text, his security coverage is broad, including Web, API, mobile, source code review, network assessments, AWS security, supply-chain risk, CI/CD security, threat modeling, vulnerability management, and security training. His past experience includes improving security coverage across 50+ code repositories at Poshmark, automating SAST/DAST integration into CI/CD, and strengthening AWS security posture around IAM, S3, and network configurations. At Paytm, he worked on SSDLC and Security Champion programs, as well as managing Bug Bounty and vulnerability disclosure processes.

Deployment, Management, and Integration

The site does not provide information about a deployable security product, console, or agent, so “deployment model” cannot be evaluated in the traditional product sense. The management capabilities are mainly reflected in processes and engineering practices, such as vulnerability triage, dashboards, security playbooks, Jira workflows, remediation SLA tracking, and developer collaboration. In terms of integration, the site explicitly mentions automating SAST/DAST into CI/CD pipelines and working with engineering and DevOps teams to reduce insecure deployment patterns.

Pricing, Compliance, and Support

The page does not list consulting packages, pricing models, payment methods, SLAs, or enterprise support channels. It also does not provide compliance certifications such as ISO, SOC 2, or PCI. Contact options include email, GitHub, and LinkedIn, which are suitable for initial collaboration or recruitment discussions, but they are not equivalent to the formal support system of a commercial security vendor.

Pros, Cons, and Who It’s For

The strengths are hands-on experience in real product environments, covering offensive and defensive testing, process building, cloud security, and training, along with community speaking experience at events such as DEFCON and Black Hat. He is also expanding into adversarial machine learning, model abuse, and secure AI system design. The limitations are the lack of productized delivery details, pricing, customer case studies, compliance endorsements, and ongoing support commitments. It is best suited for recruiters, project teams, or community partners looking for expertise in product security, application security, AWS security, SSDLC implementation, or AI/ML security exploration.

Access from China

The crawled text does not make it possible to determine access stability from mainland China, network restrictions, or payment availability, so china_access is marked as unknown. For local alternatives in China, consider domestic providers of application security testing, cloud security consulting, DevSecOps, or AI security assessment services.