Prin Sharma

Harish “Prin” Sharma · Founder & CEO, Cipher Academy

Prin Sharma

I break things, report them, and then build the fix. Hardware, machine-learning models, the networks that move information: I’ve been taking them apart since 2018. Now I run Cipher Academy, and I still ship my own products.

Move your cursor through the network. Every node you touch is compromised, and it spreads.

Break

Every system trusts something: a radio signal, a training set, a crowd that seems to agree. My work is finding where that trust can be abused, then proving it.

Offensive security

Hardware, RFID and SDR work on radio and telecom systems. iOS and Android apps taken apart with Frida and Objection. Red-team engagements and bug bounties, including recognition in NordVPN’s program.

  • Hardware
  • RFID
  • SDR
  • iOS
  • Frida
  • Burp Suite
  • Red teaming

Adversarial ML

Data poisoning, model evasion and the hard limits of AI detection. My longest paper runs 97 pages on why entropy, burst, graph-neural, LLM-text and deepfake detectors fail.

  • Data poisoning
  • Evasion
  • LLM-text detection
  • Perceptual hashing

Information warfare

I research how influence operations work once generative models are in the loop, and build the tools that catch them: coordinated-behavior detection, explainable disinformation scoring, OSINT monitoring desks.

  • OSINT
  • CIB detection
  • Platform integrity
  • Threat modeling
  • Cognitive warfare

Data poisoning, live

Corrupt 6% of the training data. Watch the model bend.

Each dot is a training sample from one of two classes. The line is the boundary a classifier learns from them, retrained in your browser as you scroll. Keep scrolling to slip in mislabeled samples, placed where they pull hardest.

Poisoned
00 / 36
Boundary turned
0.0°
Clean accuracy
--

Logistic regression, 600 clean samples, 400 held-out test points.

Build

The other half of the job. Products and tools I designed and built, from live SaaS to research code.

Graphlit board showing an app's user flows as a connected graph, with the flow details in a side panel

Live · graphlit.co

Graphlit

Draw your architecture on a whiteboard. Graphlit turns it into a typed graph, has coding agents build the app against it, and checks on every commit that the code still matches the drawing. It is the production face of VIPL, my visual-intent programming research.

  • VIPL: 560+ commits and counting
  • Single-binary CLI for four platforms
  • Python · TypeScript · Next.js
Visit graphlit.co ↗
Sayit website: “Say it. We’ll tell you which sound slipped.” above a live read-aloud panel with record, score and hear controls

Live · sayit.cipher.academy

Sayit

A pronunciation coach for English learners. Record a sentence and it scores you phoneme by phoneme, with IPA, tempo and pitch feedback. The same backend runs as a cloud SaaS or fully offline on a laptop. Moving to its own home at espeak.in.

  • 517 passages, 4 practice modes
  • Web app live · iOS app coming soon
  • FastAPI · Next.js · Postgres · Fly.io
Try Sayit ↗
Sayit iOS intro: “Say one line. Hear what the ear hears.” with a Say a line button Sayit iOS result screen: a read-aloud scored 59 out of 100, with the sounds that did the damage Sayit iOS sounds screen: 42 out of 100, listing the phonemes that slipped and how often Sayit iOS what-to-do-next screen: a three-minute fix for the /n/ sound with drills

Coming soon · iPhone

Sayit

iOS app

The same coach, built for iPhone. Say a line and about five seconds later every word gets a verdict: Clear, Check or Unclear. Tap a word to see the sounds you aimed for next to the sounds the ear heard.

Coming in the app

  • A daily dare: one line a day, picked from the sounds you miss most
  • A map of all 44 English sounds: mastered, improving, to fix
  • Notes: long recordings, scored in the background with the phone locked
  • Widgets, a Control Center button and Siri: “Practise with sayit”
  • Share any text from Safari, Notes or Mail and practise it
  • Raw audio with no noise filter, so the score reflects your voice
Join the iPhone launch list ↗
Clip from a lesson the first pipeline generated

Rebuilding · inside StudyMe

NeuralGraph

Turns a STEM syllabus into a knowledge graph, then into narrated, animated lessons. The first video pipeline rendered over a hundred explainers before I scrapped it and wrote up why. The lesson engine is being rebuilt around authored vector scenes.

  • 1,400+ topics, 50,640-node knowledge graph
  • 100+ lessons rendered at 1080p
  • Claude · Motion Canvas · Neo4j · Next.js
CoordFinder dashboard: candidate account clusters, a fused account graph and evidence scores

Working · defensive research

CoordFinder

Paste one link. CoordFinder maps the accounts most likely coordinating around it and shows the evidence for each one.

  • 0.987 precision, 1.000 recall on 11 test worlds
  • Bluesky and X connectors
  • Python · FastAPI

More work

  • Bhāṣā Studio Self-hosted studio that transcribes, translates and dubs audio and video across India’s 22 scheduled languages plus English. Whisper · NLLB-200 · IndicTrans2 Prototype
  • Buugsx Cipher Academy’s flagship course: twelve modules from zero to working bug-bounty hunter, across web, mobile and AI/ML, with labs and a certification track. Curriculum · course platform Teaching
  • Media Monitor Watches every outlet in a source register and gives analysts a private desk to read, annotate and export what they publish. 184 outlets in its first deployment. Python · FastAPI · trafilatura Working
  • ytosint & Sentinel Spots coordinated behavior on YouTube from commenter overlap, timing bursts and near-duplicate text, and gives any page or feed an explainable disinformation score. Python · DuckDB · MinHash LSH Prototype
  • NE News Tracker Every morning an agentic research run sweeps the news for India’s North-East and its neighbours, verifies and de-duplicates it, and publishes a digest before the first meeting. Agentic research · Python · Excel Runs daily
  • Skills & MCP Hub Local search across 48,587 agent skills and MCP servers, ranked for the task in front of you. Node · Ollama embeddings Working
  • Kata An accountability daemon. Turns a brain-dump into a time-blocked plan, then nudges you when your screen drifts off it. Python · Claude · Raspberry Pi Working
  • Frida Workshop 14 instrumentation scripts for SSL-pinning, root and anti-debug bypass, with a batch runner. Teaching material for Cipher Academy’s mobile-security track. Frida · Python Delivered
  • AVDA & Twix Runs fleets of Android emulators in parallel, with a plugin system so new apps and tasks drop in without touching the core. Twix adds engagement analytics and monthly reports. Python · FastAPI · Node Working
  • Defence Market Assessment Citation-backed advisory report on entering, and exporting from, India’s defence market. Written as code, so every number and chart rebuilds from source. Markdown · matplotlib · Pandoc · XeLaTeX Delivered
  • Bagri Dialect ASR Fine-tunes Whisper on a laptop for Bagri, a low-resource Rajasthani dialect with no Whisper language token. MLX · LoRA In progress

Record

An academy of my own, seven years leading security architecture, and freelance security work the whole way through.

  1. 2023Now

    Founder & CEO

    Cipher Academy · registered MSME

    • Teaches offensive security to cohorts and B2B clients: iOS exploitation, hardware hacking and bug-bounty methodology.
    • Wrote Buugsx, the flagship twelve-module bug-bounty course, and built the platform it runs on.
    • Three Udemy courses (Burp Suite, iOS security, NFT security) earned about $10K from 2022 to 2024, then retired as the material dated.
    • Ships Graphlit, Sayit, Bhāṣā Studio and NeuralGraph under the Cipher Academy name.

  2. 2018Now

    Independent Security Researcher

    Freelance · hardware, software, red team

    • Bug-bounty and red-team engagements across hardware, software and B2B targets.
    • RFID, radio, telecom and SDR testing on client devices and systems.
    • Advises on AI and cybersecurity, with a focus on hardware security.
    • Recognized in NordVPN’s bug-bounty program.

  3. 20192026

    Security Architecture Lead

    Strat News Global

    • Owned the security architecture of a large-scale analytics program for seven years.
    • Led a four-person team inside a 30+ person cross-functional group.
    • Set the hardening, access-control and OPSEC standards used program-wide. Details under NDA.

Papers

About 20 self-published papers from 2025–26 on AI-era information operations, adversarial ML and platform integrity, published through Cipher Academy. A selection is below. Copies on request.

  1. Sep 2026 · 97 pp + legal supplement

    The Evasion Architecture

    AI-augmented coordinated inauthentic behavior and the collapse of algorithmic detection

    Where entropy, burst, graph-neural, LLM-text, perceptual-hash and deepfake detectors break down; information-theoretic bounds on detection; an empirical review across 73 elections. A companion supplement covers the DSA, AI Act, FARA and GDPR.

    Request a copy

  2. Jul 2026

    Policy Gray Zones & EU Regulatory Response

    Gap analysis across the DSA, AI Act and FARA: which behaviors each one reaches, and what falls between them.

    Request a copy

  3. Jun 2026

    AI Microtargeting & Psychographic Targeting

    How psychographic targeting works in AI-era influence operations, and where its real limits sit.

    Request a copy

  4. May 2026

    Adversarial ML: AI Data Poisoning

    Data-poisoning attacks against machine-learning training pipelines. The demo above is the simplest case.

    Request a copy

  5. Apr 2026

    Counter-CIB Technical Approaches

    A survey of emerging detection methods and research programs against coordinated inauthentic behavior.

    Request a copy

  6. Mar 2026

    CIB Effectiveness Analysis

    Operational impact, and the engagement paradox in AI-augmented influence operations.

    Request a copy

  7. Feb 2026

    Cognitive Warfare & AI-CIB Doctrine

    NATO cognitive-warfare concepts, reflexive control and the “Three Warfares.”

    Request a copy

  8. Jan 2026

    Influence Operations: Deep Research

    A landscape survey of state and commercial influence-operations activity.

    Request a copy

Contact / Delhi, IN

Need something broken, or built? Hardware to test, a model to harden, a product to ship, a team to train. Write to me.

GitHub
Prinsharma1999 ↗
Academy
cipher.academy ↗
Based in
Delhi, India · IST (UTC+5:30)
Languages
English, Hindi, Japanese (JLPT N5)
Off the clock
200 km rides and specialty coffee