XECbuild is an independent offensive security practice. Small on purpose, senior only, and focused on the classes of vulnerability that automated tools consistently miss - and increasingly, on building the systems that do not have them.
We met on the delivery side of large security consultancies. The pattern was always the same. Tooling ran, a long report appeared, and the findings that actually mattered were three lines on page forty.
XECbuild started as a reaction to that. We kept the rigour of formal methodology and dropped everything that existed to make reports look thick.
Today we work with product teams at startups and security teams inside larger organisations, usually on a recurring basis around release cycles - and for some of them, we write the code too.
Make high quality offensive testing accessible to teams that cannot absorb a six figure consultancy engagement, without diluting what the testing actually is.
Every engagement is delivered by one of them, start to finish.
Security should be proactive - not something considered only after an incident occurs.
Our mission is to help organisations understand their security risks, identify weaknesses, and strengthen their systems before those weaknesses can be exploited.
Founder of XECbuild and a cybersecurity researcher focused on penetration testing and vulnerability research. He identifies security weaknesses across web applications, APIs and digital infrastructure, combining technical research, manual testing, reconnaissance and attack surface analysis to uncover the vulnerabilities automated tools alone may miss.
Certified Ethical Hacker and offensive security practitioner specialising in deep manual VAPT and business logic exploitation. As a bug bounty hunter he has secured dozens of global enterprises and earned Hall of Fame inductions from Apple, NASA, Ericsson and Zepto. At XECbuild, Vansh cuts through automated noise to uncover the complex, real-world vulnerabilities that scanners miss.
Builds and secures what XECbuild ships. Devansh writes the code behind the practice and its client work - websites, web applications, APIs and the cloud infrastructure underneath - and then tests it the way an attacker would. Software engineering and security engineering in the same pair of hands, which is why the systems he builds start hardened instead of being hardened later.
Directs business operations, enterprise client relationships, and execution across XECbuild. Holding a background in Computer Science Engineering with a specialization in Cybersecurity from DIT University alongside practical business development experience, Yash connects client business requirements with deep technical and security engineering. From initial vulnerability scoping and security partnerships to client onboarding and on-time project delivery, he ensures engagements run with operational clarity, speed, and precision.
Vansh plays a key role in shaping XECbuild's business direction and expanding its professional network. He works closely with stakeholders to identify opportunities, establish strategic collaborations, and strengthen the company's presence in the digital technology space. With a focus on growth, communication, and execution, he contributes to building XECbuild into a trusted technology partner for businesses.
