Security investigation & incident response
Malware and intrusion analysis, evidence-led findings, and practical remediation priorities when something has gone wrong — or when you need to know whether it has.
Cybersecurity · Data Security · Applied Research
Dr. Kaushal Bhavsar
I help organizations investigate malware, secure cloud applications, and protect sensitive data. My work combines 15+ years of hands-on cybersecurity experience with research in insider threats.
15+
Years in cybersecurity
Investigation, engineering, and advisory work
PhD
Insider threat research
Thesis completed in 2021; degree conferred in 2022
Patent
US12361127B1 — malware detection
I am the named inventor; patent granted July 2025
Build
Security products & platforms
Historical work including BUGSKAN and BugShield
Expertise
What I do
Practical security work across investigation, engineering, research, and advisory.
Security architecture & engineering
Architecture and access-control review, cloud hardening, and defensive engineering choices that can be implemented in production.
Data privacy and security
Sensitive-data discovery, access governance, and secure handling of analytics and customer data — scoped to the systems you operate.
Training, research collaboration & advisory
Independent technical assessments, workshops, and research collaboration grounded in investigation and engineering practice.
Portfolio
Selected work
Examples from consulting, product development, and research — outcomes you can verify on the portfolio pages.
Research
US patent — malware detection
I am the named inventor on US12361127B1 for systems that monitor browser execution and visual changes on a page before acting. Granted July 2025; assignee on the record is Go Daddy Operating Co LLC.
Read the case
Product
BUGSKAN — application security scanner
Cloud-based vulnerability scanning I built at BUGSKAN to help teams find and fix application security issues. The original scanner is discontinued; retained here as historical product work.
Read the case
Research
PhD — predicting insider cyber threats
Doctoral research on predicting insider threats with behavioral analysis and deep learning, focused on patterns that are difficult to spot with conventional controls alone.
Read the caseInnovation
Research and innovation
Doctoral research, patented detection work, and selected publications.
PhD research — insider threats
Prediction of Insider Cyber Threats Using Behavioral Analysis (GLS University). Thesis submitted in 2021; degree conferred in March 2022. Documented in the SATARK research lineage at satark.org.
US patent — malware detection
I am the named inventor on US12361127B1, “Computer-based systems configured for malware detection and methods of use thereof,” granted in July 2025.
Selected research topics
Malicious JavaScript analysis, dynamic malware analysis techniques, and defenses for web applications — documented in the research portfolio.
Recognition
Media recognition
Television, print, and digital outlets have covered my work on cybersecurity awareness, investigations, and community initiatives.
- News18 Gujarati
- VTV News
- TV9
- Sandesh
- Divya Bhaskar
- Ahmedabad Mirror
- Gujarat Samachar
Writing
Insights
Selected articles on threats, engineering practice, and security careers.
Critical PHP RCE Advisory: Patch CVE-2026-109618 and CVE-2026-109619 Now
PHP2Shell exposes PHP web servers to critical remote code execution risks. I explain the affected runtimes, fixed PHP versions, and the checks…
WhatsApp Web Phishing Scam Exposed
A phishing page can trick you into linking WhatsApp Web to an attacker-controlled session. The sample I examined used a rotating QR…
Decoding Cybersecurity Roles: Analyst vs. Engineer vs. Researcher
Security analysts, engineers, and researchers overlap in real teams. Here is the practical difference in what each role produces — and where…
How to Perform Forensic Investigation on an AWS Instance without a Public Key
Introduction Performing a forensic investigation on an AWS EC2 instance can become complicated if access to the instance is lost or the…
Engage
Have a security challenge to investigate or solve?
I take scoped work across incident investigation, architecture and access review, data privacy and security, training, and research advisory — including hands-on remediation where we agree it in scope. Describe the problem and the outcome you need.
Discuss a Security Challenge