Tarunpreet Singh

I study economics.I build with AI.I find other people’s bugs.

Two degrees run at once. A full-stack analytics platform that reached 800+ people through exam season. National Winner at IIM Bangalore Case Competition 2026.

Tarunpreet Singh · National Winner, IIM Bangalore 2026 · Bug bounty 2022–2024

Most people pick one of these. I kept both.

National Winner, IIM Bangalore 2026. The same discipline that catches bugs wins cases.

Economics taught me to ask what a number is actually measuring. Applied AI taught me to build the thing that produces the number. Doing both is a lesson in not letting either one flatter you.

The bug bounty years sit oddly next to a syllabus. I kept doing them anyway. A vulnerability report is an argument about evidence: here is the request, here is what it returned, here is the impact, here is the fix. Publishing the exploit is optional. Writing it up properly is not.

When numbers lie.

Correlation exhibit: Series A and Series B correlate at 0.99An illustrative line chart, not real-world data. Series A and Series B climb in near-lockstep, correlating at 0.99, which reads as one causing the other. A third series, hidden in the default view, correlates with Series A at 1.00 and with Series B at 1.00. Four buttons switch between the pair, either series alone, and the confound.R = 0.99

Two series. One cause? That is the reading this chart invites, and it is wrong.

Illustrative teaching example, not real-world data

Two things I built.

Live · 2025 — 2026

Mocklytics

A full-stack analytics platform for exam preparation, built and scaled to 800+ users.

800+

people used it through the exam cycle

Open source · 2025

WiseLang

A Python-inspired esoteric programming language, co-developed, with a real lexer, parser and evaluator underneath.

WiseLang — the language that reads like Python and speaks Hindi. Read it

Stack — React · TypeScript · Node.js · Express.js · MySQL · Tailwind CSS · Recharts · JWT · AWS · Cloudflare · Vercel · Render

Five chapters. None of them is a conventional career path.

  1. Jul 2026 — Sep 2026

    Co-Founder / CTO · Stealth Startup

    Microsoft for Startups

    Built an enterprise-ready ed-tech platform focused on scalable development, data compliance, and reliable infrastructure.

    Inducted into the global Microsoft for Startups Founders Hub, which came with $50K+ in Azure credits and technical resources.

    Used Azure DevOps, Azure AI Foundry, and managed databases to streamline CI/CD, AI inference, and microservices infrastructure.

    $50K+ Azure credits · Founders Hub Microsoft for Startups

  2. Oct 2025 — Dec 2025 · Remote

    Design Intern · E-Cell, IIT Bombay

    Produced social media creatives for the entrepreneurship initiatives and for the outreach campaigns that ran alongside them.

  3. Sep 2025 — Oct 2025 · Hybrid

    Campus Ambassador · Rendezvous, IIT Delhi

    Drove peer outreach and awareness for IIT Delhi’s annual cultural festival.

    Rank 5 among all ambassadors, with a Certificate of Completion and a formal Letter of Recommendation.

  4. Jul 2025 — Sep 2025 · Remote

    Contributor & Campus Ambassador · GirlScript Summer of Code

    Contributed to open-source projects, and promoted the programme on campus to get other people contributing too.

  5. Mar 2022 — Mar 2024 · Remote

    Bug Bounty Hunter · Freelance

    Found and responsibly disclosed web application vulnerabilities, then wrote the reports up properly: what the flaw was, what it exposed, and what should change.

When Numbers Lie

The Misuse of Correlation in Policy Debates

#01

All-India Rank · Sep 2025

Examined how misreading correlation as causation distorts economic-policy arguments.

Responsible Vulnerability Disclosure

Acknowledged by CERT-In, MeitY, Government of India, in 2026, for web application vulnerabilities I found and reported through the proper channel.

CERT-In · 2026

10,000+

COVID-19 relief work, Government of Punjab

The campaign reached over 10,000 participants internationally.

Two classrooms.

University of Delhi

College of Vocational Studies · Delhi

B.A. (Hons.), Economics

Class of 2029

Indian Institute of Technology Jodhpur

· Jodhpur

B.S., Applied Artificial Intelligence & Data Science

Class of 2029

What I know

Programming
Python · Java · JavaScript · TypeScript · Bash · SQL · HTML · CSS · LaTeX
AI & Data
Generative AI · LLMs · AI Agents · Predictive Modeling · Exploratory Data Analysis · Statistical Analysis · Model Context Protocol
Backend
Node.js · Next.js · Express.js · Flask · REST APIs · BFF · Discord API
Frontend
React · Angular · Tailwind CSS · Recharts · shadcn/ui · Framer Motion
Databases
PostgreSQL · MySQL · MongoDB · SQLite · Cloud Firestore · Amazon RDS · Drizzle ORM · Redis
Cloud / DevOps
AWS (EC2, S3, RDS, Route 53) · Microsoft Azure · Google Cloud Platform · Docker · Nginx · Linux · Firebase · Cloudflare · Vercel · Render
Cybersecurity
Web Security · Application Security · API Security · Penetration Testing · Burp Suite · OWASP Top 10 · Access Control Testing · IDOR / BOLA Testing · Responsible Disclosure
Auth / Security
Google OAuth · Firebase Authentication · JWT Authentication · RBAC · CSRF Protection · Rate Limiting · Signed URLs
Design
Figma · Canva · Adobe Photoshop · Graphic Design
Tools
Git · GitHub · Postman · PostHog · Razorpay API · Stripe API · n8n · Figma · Canva
Embedded
Arduino · ESP32 · NFC · GPIO · Wireless Modules
Beyond the stack
Finance · Economics · Public Policy · Research · Technical Communication

The certificates, for the record.

  • 2026National Winner — IIM Bangalore National Student Case CompetitionNational Rank 1 among 450+ teams and 2,250+ participants
  • 2026Acknowledgement of Responsible Vulnerability DisclosureCERT-In · MeitY · Government of India
  • 2025All-India Rank 1 — Econ 101 National Call for ArticlesIIM Rohtak
  • 2025All-India Rank 5 and Letter of Recommendation — Campus AmbassadorRendezvous, IIT Delhi
  • 2021Certificate of AppreciationDeputy Commissioner, Kapurthala, Government of Punjab
  • 2021Award of Honour — Corona WarriorAll India Human Rights
  • 2021Youngest Frontline WarriorCT World School

WorkExperienceWritingSkillsContact

Research, security, building something, arguing about correlation: all of it works. Both addresses below reach me, and I read the mail.

Curiosity, building, and knowing the difference between the two.

Backend systems · Applied AI · Web security · Economics

01Question02Evidence03Build04Write up

  1. 01

    Question

    What is this number actually measuring?

  2. 02

    Evidence

    Reproduce it. Write it so a stranger can verify it.

  3. 03

    Build

    Ship the thing that produces the number.

  4. 04

    Write up

    Report the flaw, the impact, and the fix. Not the exploit.

Query the local system.

Type commands or click the helper buttons. `message` opens your mail app with everything prefilled — nothing is stored here.

tarunpreet.shExhibit T-01

tarunpreet.sh booted. Type `help` or click a command.

TRY: