Working with @int0ha_ has been a genuine pleasure. His reports are consistently well written and clearly communicated, and he pairs them with thoughtful, well-constructed PoC scripts that make his claims easy to verify. Beyond the technical quality, he's professional, friendly, and collaborative throughout as well as quick to respond, quick with informative retests, and refreshingly honest about the limits of his own findings. What set his work apart was the depth: he dug into how our system actually behaves, engaged with the business domain rather than just inputs and outputs, and repeatedly proposed sensible fixes alongside the bug. We welcome his reports any day.

Donovan Bray, Director of DevOps, Kiavi Inc.

Connor Carro identified and responsibly disclosed a High-severity (CVSS 8.2) account takeover vulnerability in one of our developer platforms through the HackerOne Vulnerability Disclosure Program. His report was exceptionally detailed and technically precise. It demonstrated a mature understanding of GraphQL security, authentication logic, and responsible disclosure best practices.

Throughout the more than one-year remediation process, Connor showed outstanding professionalism, patience, clear communication, and a genuine willingness to assist our team. He proactively provided corrected reproduction steps during retesting and remained respectful and collaborative even when updates were delayed.

Connor's contribution directly helped strengthen the security of our systems and protect our users. We are happy to strongly recommend him for technical internships and future roles in technology. He is a talented, ethical, and highly motivated security researcher and developer who will be an asset to any team fortunate enough to work with him.