सुस्वागतम् su-svāgatam · welcome अतिथि देवो भवःthe guest is god — taittirīya upaniṣad
About — Shubham Raj
000
About me

The story so far.

Most people know me as a cybersecurity expert. The reality is bigger — and it started with a kid in Bihar asking how things break.

I didn't get into cybersecurity to follow a career path. I got into it because I couldn't stop asking one question: "What happens if this breaks?"

Growing up in Bihar, far from India's startup corridors, I learned early that access is not the same as ambition. I taught myself to take software apart — websites, networks, the systems people trusted blindly — and then I learned the harder skill: putting them back together stronger. That instinct became a discipline, the discipline became a profession, and the profession became two companies.

With Purezza Technologies, which I co-founded and lead as CEO, we started as a service operation and grew into a full technology ecosystem — software engineering, security, branding and digital growth for 50+ businesses across multiple countries. Hundreds of deliveries taught me how products actually survive contact with the real world.

But services only scale linearly. Products scale exponentially. That's why I co-founded GarudaX — a cybersecurity product lab where I serve as CTO. We build AI-powered platforms that detect sensitive data leaks, automate vulnerability assessment, and predict threats before they land. Not slideware. Shipping software.

Along the way I've penetration-tested 50+ systems, uncovered 200+ critical vulnerabilities, managed 120+ security incidents, and helped organizations hit a 90% remediation rate. I've also kept one foot firmly in education — because I believe security is a culture problem before it is a technology problem. 1,500+ interns mentored. 1,200+ students taught. 500+ employees trained. A standing collaboration with the Cyber Police Cell in Chapra to bring cybercrime awareness to people who need it most.

The throughline in all of it: I build things that make trust possible. Companies, platforms, teams, people — all of it in service of a future where being digital doesn't mean being vulnerable.

(01) — Operating principles

Rules I don't break.

P–01

Security is a mindset, not a checklist.

Compliance tells you what was true yesterday. A security culture tells you what will be true tomorrow. I build the second one.

P–02

Ship products, not promises.

Decks don't stop breaches. Working software does. Every idea I back has to survive a build, a user, and an attacker.

P–03

Think like the attacker, act like the defender.

The best defense is written by someone who knows exactly how they'd get in. That's why I never stopped hacking — ethically.

P–04

Teach what you know, loudly.

Every professional I mentor multiplies the defense. Knowledge hoarded is leverage wasted.

P–05

Geography is not destiny.

World-class companies can come from Bihar. I intend to keep proving it.

How the work gets done

Alone you go fast.
Together you go far.

(02) — Roots

Five words I
run my life by.

My tradition gave me a vocabulary for this work long before the industry did.

धर्म Dharma · duty

Protecting people's systems isn't my job title. It's my duty. The job title just followed.

कर्म Karma · work

Do the work, let the results speak. Every award I've won arrived uninvited.

सेवा Seva · service

1,500+ mentees, free police-cell awareness camps — knowledge kept to yourself is knowledge wasted.

ज्ञान Jnana · knowledge

Certifications, workshops, 30-day hacking streaks — the day I stop learning, an attacker overtakes me.

तपस् Tapas · discipline

Building two companies while earning a 9.1 CGPA isn't talent. It's heat, applied daily.

(03) — Education & credentials

Trained, certified,
still learning.

Degree · 2022–2026

B.Tech, Computer Science Engineering

Amity University Patna — a 9.1 CGPA, earned while building two companies on the side.

Core certification · 2024

Certified Ethical Hacker

Cisco Networking Academy — six months of hands-on enterprise security tooling and network penetration testing.

Schooling

Kendriya Vidyalaya Mashrak

Science stream — Mathematics and Computer Science. Where the curiosity started, between classes and Fiverr orders.

Continued training

Copilot for Security Ninja — Microsoft  SQL Injection Attacks  TryHackMe — 30-Day Hacking Streak  PrivacyOps — Data Privacy Protection  Cyber Security Associate  Advent of Cyber  IIT Patna Security Workshops  Postman API Days — NIT Patna  Internshala — Job & Internship Prep  Ethical Hacking Certifications

The long game

Started in Bihar.
Built for the world.

(04) — The long game

Where this is going
by 2035.

Objective 01

Build one of India's most influential cybersecurity product companies

GarudaX is the vehicle. The roadmap is already in motion.

Objective 02

Put AI-powered security platforms in global hands

Defense that predicts, correlates and prioritizes — adopted far beyond India's borders.

Objective 03

Train 100,000+ cybersecurity professionals

From 1,500 mentees to a hundred thousand. The pipeline is the product.

Objective 04

Protect millions of users with technology that ships

Real platforms, real users, real attacks stopped — measured in lives made safer online.

Objective 05

Position India as a leader in cybersecurity innovation

Not a back office for the world's security operations — a front office for its best ideas.

कर्मण्येवाधिकारस्ते मा फलेषु कदाचन karmaṇy-evādhikāras te mā phaleṣu kadācana — Bhagavad Gita 2.47

"Do the work. Don't chase the fruits."
The awards, the followers, the titles — they followed the work. They were never the point.

Book a call