Security Researcher and 6x r.

Welcome to my personal website!

About me
2+
Years of Professional Experience
30+
Vulnerabilities disclosed to Companies
12
Articles published
6x
Hacker Hall of Fames

My name is Aaron Thomas. I'm a Security Researcher with a strong passion for cybersecurity and digital privacy. I care about helping others be as secure as possible when online and disclosing vulnerabilities to companies. I have taught cybersecurity awareness to 7 highschool classes, including 5 AP courses. I am also a Tor Snowflake Proxy Operator.

JavaScriptBug BountiesLinux Security ResearchPrivacy
Projects

What I have built.

GitHub →
Writing

My Articles, Disclosed Bug Reports & Research Papers

Securing Billions of Users Around the World!

Hacker Hall of Fame & Security Acknowledgments

Trusted Access

Verified

Anthropic Cyber Verification Program

Approved member for authorized security research. (June 2026 - September 2026)

Program details
Fighting Internet Censorship

My Tor Snowflake by the Numbers

❄️
All-Time Tor Snowflake Connections
0
People helped worldwide and still counting!
🌐
Total Bandwidth Donated to the Tor Project
0
2025 - Per Day Average & Monthly Totals
January
21.6
647 total
February
76
988 total
March
81
2,512 total
April
103.9
3,116 total
May
161.9
5,019 total
June
248.8
7,465 total
July
235
7,284 total
August
217
6,728 total
September
264
7,924 total
October
130.9
4,057 total
November
266.8
7,471 total
December
269
8,339 total
2026 - Per Day Average & Monthly Totals
January
459.4
14,241 total
February
424.9
11,898 total
March
354.6
10,994 total
April
561.6
16,849 total
May
394.9
12,241 total
June
353.1
10,592 total
July
310
9,609 total
August
228.9
7,096 total
September
240.9
7,227 total

Recommendations

What Others Say About My Work!

Kind words from colleagues, collaborators, and professionals I've worked with on privacy and security projects.

"In the security industry, there is often significant confusion around risk, impact, and realistic threat assessment. Aaron stands out for his ability to clearly communicate the vulnerabilities he discovers, the threat models they align with, and their genuine business and security impact. Rather than relying on fear, uncertainty, and doubt (FUD), he provides balanced, evidence-based guidance that helps organisations make informed decisions. While finding vulnerabilities is never ideal, Aaron has a talent for presenting security issues in a way that is clear, actionable, and easy to prioritise. His pragmatic approach to risk assessment and communication makes him a highly valuable security professional and trusted advisor."

Zoë Rose

CSIRT Security Operations / Development Senior Manager EMEA at Canon EMEA

"I volunteer with Aaron lat Operation Safe Escape, where he serves as a malware researcher. I recommend him highly. Aaron understands that malware analysis in our work is a safety function, not a lab exercise. He identifies threats, documents them carefully, and translates technical findings into guidance our team can use with survivors. His focus on stalkerware, surveillance tools, and mobile privacy issues is exactly the skill set this mission requires. He is precise, responsible, and calm under pressure. He does not overstate findings, and he writes clearly enough that both technical staff and advocates can act on his work. I trust his analysis and his judgment. Aaron is already making a measurable contribution here. Any security, forensics, or survivor-support team would be fortunate to have him."

Will Baggett

Former Intel Officer & NATO SOF SME Public SpeakerDigital Mobile Forensics Specialist Insider Threat

"I’ve had the opportunity to see firsthand the impact Aaron makes as a security researcher. What sets him apart isn’t simply his ability to identify critical vulnerabilities. It’s what he does after he finds them. Aaron approaches vulnerability research with a strong sense of responsibility. He takes the time to responsibly disclose his findings, clearly communicate the potential risk, and, most importantly, provide practical recommendations organizations can use to protect themselves. His approach isn’t simply, 'I found a vulnerability.' It’s, 'I found a vulnerability, here’s why it matters, and here’s what we can do about it.' That combination of technical skill, responsible disclosure, and genuine concern for improving security is incredibly valuable. Aaron’s research consistently makes a meaningful impact. I would highly recommend him to anyone looking for a security researcher who understands that finding vulnerabilities is only part of the job. The real value comes from helping people become more secure because of what you found."

Julie Beck

Cyber Threat Intelligence | CEH | OSINT | Digital Exposure & OPSEC, digital forensics. Private Investigator.

"I supervised Aaron during his research internship at the Surveillance Technology Oversight Project. He is an enthusiastic and smart researcher. We capitalized on his existing expertise to wrap up a project on location-tracking apps' surveillance risks. I'm grateful for the work he did and recommend him to others."

Eleni Manis, PhD, MPA

Research Director, Surveillance Technology Oversight Project

"I've had the pleasure of working with Aaron Thomas at Operation Safe Escape for the past few months, and in that short time, he's made a tremendous impact. Aaron has been instrumental in helping us develop and refine key technologies that directly support our mission. His initiative, technical insight, and collaborative spirit have made him a valuable asset to the team. I look forward to seeing the continued contributions he'll bring to our work."

Tony Hunt

Deputy Director at Operation Safe Escape

"Aaron is profoundly knowledgable, passionate, empathetic and driven. His knowhow in the world of cybersecurity and privacy is astounding and he is my go to for information and dispelling myths. As Aaron's senior year English teacher, I am proud beyond measure at the scope of his writing and how informative and approachable he makes a complex world that many are only just starting to delve into. I am certain Aaron will be a change-maker and will likely be the one we should all be paying heed to."

Jenn Hermus-Washburn

Educator | Library Media Specialist | Creator

"Aaron Thomas is a doer and an innovator in the field of cybersecurity, particularly the legal and ethical aspects. I have known Aaron Thomas since he was a student in my Research Writing and Technical Communication classes last year. Not only is Aaron a talented and dedicated student but he is also an active learner and applies that learning and skill to foster cybersecurity in a moral and legal way. As my student, Aaron wrote an excellent and eye-opening paper on Encryption and Women’s rights, which examined privacy issues for women in a culture that repeatedly invades their privacy and interferes with their autonomy. He then wrote a paper on stalkerware and Domestic Violence which was published on LinkedIn on International Women’s Day. Aaron is an advocate for these issues and works as a volunteer at Operation Safe escape and as a security engineer at Swift Control Systems. Aaron is not only engaged in the study of cybersecurity, but he is also morally invested in making a difference in this rapidly accelerating technology. He will be a pioneer and innovator in keeping privacy issues at the forefront of technological development."

Anne Sanderson

Adjunct Professor of English at New York Institute of Technology

"Aaron Thomas has been incredibly valuable in his volunteer role at Operation Safe Escape. Aaron has dedicated his time and intellect to protecting survivors of domestic violence by researching solutions to combat stalkerware. Stalkerware is a terrifying threat to vulnerable individuals all over the world, and Aaron's work to help eradicate it is impactful. Aaron is not only technically skilled, but is also compassionate and driven. I can highly recommend Aaron to anyone looking for a dedicated, knowledgeable, and mission-focused professional in cybersecurity and advocacy."

Chris Cox

Executive Director at Operation Safe Escape

Contact

Give Your Work a Greater Purpose

Reach out to me for private invites or collaboration opportunities for Bug Bounties!

aaront AT wearehackerone DOT com