List of Y Combinator companies I have worked with(hacked)

Background:

I have worked with lots of companies as security consultant through bug bounties either I asked them if they need my service or they approached. I’m a big fan of Paul’s essay, Hacker News, Startup School and YC as a whole, so thought to document my contribution to YC(nothing technical, just a list).

I have worked with these companies in their early stage to resolve security issues with their websites:

1. Xobni (S06) :   Acquired by Yahoo later. Found account take over CSRF in setting page. Got Yahoo swags.
2. Dropbox (S07):  Multiple bugs in the mailbox and other acquisitions. Got listed on Special Thanks page, swags and 100GB.
3. Disqus (S07):  Got stickers and swags.(Can’t find the mail, don’t remember the issues)
4. Heroku(W08): 
5. WePay (S09):  Participated in their bug bounty program on Hackerone.
   
6. Olark (S09):   
7. Mixpanel(S09):
8. Stripe(S10):
9. PagerDuty(S10): Multiple issues,Multiple swags 
10. Hipmunk(S10): Just realized, I was discussing stuff with Steve Huffman 🙂
11. Chart.io(S10):
12. Mailgun(W11):
13. DR Chrono(W11): Worked with CEO directly and got handsomely rewarded for my work.
14. Parse(S11):  Yes, Parse CEO said this
15. Firebase(S11):
16. Instacart(S12):   Through private bug bounty
17. Easel.io(S12):  Acquired by Github, reported multiple issues. Special Thanks page on Github.
18. Coinbase(S12): Through public bug bounty on Hackerone.
19. Clever(S12):
20. Zenefits(W13): Through private Bug bounty.
21. Heap Analytics(W13):
22. TrueVault(W14):
23. Algolia(W14): still have lots of Algolia stickers 🙂
24. Gitlab(W15): Listed on Acknowledgement page.
25. Hacker News: Yup, Y Combinator itself. You can find me on their thanks page.

Look like that’s it for now.

so 25, not bad! BTW I am no ninja hacker, most of the stuff are the same task just another website. I have been a jerk professionally (in responding emails), sometimes I didn’t know the tech celebrity I’m talking with, for e.g Steve Huffman, IIya sukar.

I can help with basic web application testing but crowdsourcing your security is the best way to stay updated.

Any questions, suggestions or want to hire me? I’m at bhattacharya.manish7@gmail.com

Logging off

Manish

Edit: This list has grown up to 120+, I’m not maintaining this list anymore!