No Laptop, No Lab: How Destawell's Founder Got on Google's Bug Hunters List
Most people assume serious security research needs a laptop, a home lab and expensive tools. Destawell's founder, Niranj R. Mahaswar (19), does it all from one Android phone, using Termux and Kali NetHunter. The result Niranj has now received an Honorable Mention from Google Bug Hunters , on top of his NASA VDP Hall of Fame and a published GitHub Security Advisory (GHSA-259w-wmqg-fp76,…
Destawell's founder Niranj R. Mahaswar, just 19 years old, demonstrates that serious security research doesn't require a laptop or expensive tools. He conducts all his work on a single Android phone, utilizing Termux and Kali NetHunter. This mobile-first approach has earned him an Honorable Mention from Google Bug Hunters, in addition to recognition from NASA's Vulnerability Disclosure Program (VDP) Hall of Fame and a published GitHub Security Advisory (GHSA-259w-wmqg-fp76, CVE-2026-86046).
The mobile-only workflow has taught Niranj and Destawell the importance of focusing on constraints. With limited tools, researchers learn to read code and understand the target before testing. Not every report will be taken seriously, as some get dismissed or ruled out. However, each report provides valuable insights into improving the triage process. Before testing, it's crucial to read the program rules carefully.
Niranj stresses the importance of clear, reproducible write-ups, as these are taken seriously. Focus areas include Mobile-First Security Research, AI Red Teaming, and Open-Source Tooling, all built around responsible disclosure. For those starting out, even if all you have is a phone, you can begin today. Install Termux, select a program with a clear scope, and continue your journey. A special thank you to the Google Bug Hunters team for acknowledging the work of independent researchers.
Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
