Replies within one working day
Book a callOne person. On purpose.
I'm a security engineer and a full-stack developer in Pune, and Alythen is what I do full-time. It's the same person as amansploit.com, with an invoice.
Aman Arvind Sonkamble · pronounced AL-ih-then
The same person has to do both halves.
Not because I couldn't find people. Because the thing I'm selling — an application built by someone who knows exactly how it will be attacked — only works if the same person does both halves. The moment there's a “dev team” and a “security guy”, the security guy arrives last and gets overruled by the deadline. I've watched it happen from both sides.
Aman Arvind Sonkamble · security engineer and full-stack developer · Pune, India
Four steps, in order.
A degree, six months of attacking real systems, a year of watching feeds go quiet, and then a name on the invoice.
- 01
Coventry University
B.Sc. (Hons) Cybersecurity. M.Sc. Cyber Security, EC-Council University — in progress.
2021 – 2025
- 02
Six months of penetration testing
Web, API, mobile, thick-client and infrastructure — against real client systems, and the reports that came out of it.
Jul 2025 – Jan 2026
- 03
Security analyst
Monitoring tools for a security operations team — the kind of work where a feed going quiet for two days is a real incident.
Jun – Aug 2026
- 04
Independent, on purpose
Three clients in the first six weeks, through referrals and this site. The same work, with a name on the invoice that isn't a handle.
August 2026
It also means I'll say no.
I take one build at a time, I don't subcontract, and if your project needs a team of five I'll tell you on the first call and mean it.
Four things, in writing.
Said here so you don't have to find out on the call.
- 01
Ship anything that skips the security review
Every build and every website goes through the same pre-launch review, at every price. If a budget only works by cutting that week, I'll say so.
- 02
Put testimonials, logos or numbers on this site that I can't prove
The Proof page explains what's there instead.
- 03
Tell you an automated scan is a penetration test
Or that a review is a certificate.
- 04
Sell you a pentest your app doesn't need
If a review comes back clean, that's the answer.
Alythen is new. Judge it on what's checkable.
Alythen has existed since August 2026; what existed before that is on the Proof page — a set of tools anyone can run, an open-source project people are using, a production platform I secured, a report format you can read before you pay for it, and four certifications you can verify.
The other site. amansploit.com is where I put the free things — the tools, Shield, the templates, the articles. It has a hacker's name because that's the audience. Alythen is the same person, with an invoice.
I started Alythen because the work I'm proudest of never had my name on it: reports that went out under a company letterhead, an application that was secured because a deadline slipped rather than because anyone chose it. Here the name on the invoice is the name on the code and the name on the findings. If something ships with a hole in it, there is exactly one person to ask, and you have his number.
— Aman · Aman Arvind Sonkamble · Pune, India
One person. On purpose.
Replies within one working day; the first call is free and about fit.