Skip to content
You must be logged in to sponsor preetkaran20

Become a sponsor to Karan Preet Singh Sasan

@preetkaran20

Karan Preet Singh Sasan

preetkaran20
Surrey, BC

👋 Hi, I'm Karan Preet Singh Sasan — an open source security software engineer, Founder of SasanLabs.

I've been building security tools and vulnerable applications since 2019, helping developers and researchers understand, simulate, and defend against real-world vulnerabilities.

🧪 OWASP VulnerableApp Ecosystem

In 2019, I founded OWASP VulnerableApp — a deliberately vulnerable application built for security enthusiasts, by security enthusiasts. It has since grown into a full ecosystem with 600+ forks and an active global contributor community:

  • 🧩 VulnerableApp-Facade — a modern, lightweight distributed farm of vulnerable apps covering vulnerabilities across multiple tech stacks via a single interface
  • 🐘 VulnerableApp-PHP — a PHP-based vulnerable application
  • ☕ VulnerableApp-JSP — a JSP-based vulnerable application

🔥 LLMForge — AI Security, Evolved

LLMForge is my newest project — a modular AI security gateway for building and testing dynamic, LLM-driven vulnerability labs. Designed for prompt injection research, exploit simulation, and AI red-team experimentation, it generates unique adaptive exploit paths every session — bringing security training into the AI era.

🛡️ ZAProxy

I joined the ZAP team in 2019 and have authored two add-ons:

💡 Why Sponsor Me?

All of my work is free, open source, and community-driven. Your sponsorship directly gives me more time to:

  • Expand vulnerability coverage in OWASP VulnerableApp
  • Build LLMForge into the go-to platform for AI security research
  • Maintain ZAP add-ons used by security professionals worldwide
  • Mentor contributors and grow the open source security community

Every contribution — big or small — makes a real difference. Thank you for supporting open source security! 🙏

@preetkaran20

It would be wonderful to know that my efforts are recognized and appreciated. Thanks in advance for helping me on my way!

Featured work

  1. SasanLabs/VulnerableApp

    OWASP VulnerableApp Project: Break it. Scan it. Reproduce it. Benchmark against it. Improve it.

    Java 483
  2. SasanLabs/LLMForge

    LLMForge is probably the most modern AI vulnerability lab for OWASP VulnerableApp — real-LLM-backed labs for prompt injection, LLM-orchestrated BOLA, and RAG attacks.

    Python 15
  3. SasanLabs/VulnerableApp-facade

    VulnerableApp-facade is probably most modern lightweight distributed farm of Vulnerable Applications built for handling wide range of vulnerabilities across tech stacks.

    TypeScript 57
  4. zaproxy/zaproxy

    The ZAP by Checkmarx Core project

    Java 16,170
  5. SasanLabs/owasp-zap-jwt-addon

    OWASP ZAP addon for finding vulnerabilities in JWT Implementations

    Java 43
  6. SasanLabs/owasp-zap-fileupload-addon

    OWASP ZAP add-on for finding vulnerabilities in File Upload functionality.

    Java 24

Learn more about sponsoring developers and organizations.

Report abuse

0% towards 10 monthly sponsors goal

Be the first to sponsor this goal!

Select a tier

$ a month

Choose a custom amount.

$1 a month

Select
  • Buy me a chocolate bar 🍫 Let me know someone noticed.

$2 a month

Select
  • Buy me a coffee ☕️ To help keep me going.

$5 a month

Select
  • Buy me an evening snacks to help keep me going.

$10 a month

Select

@preetkaran20 gets a breakfast 🍳 It is the most important meal of the day, it'll fuel me up for producing great things.

$25 a month

Select
  • Logo or name goes in my project's under SasanLabs organisation README

$50 a month

Select
  • Earn a mention in our Release notes

$100 a month

Select
  • In-depth Discuss on our current projects, there architectures and future goals

$150 a month

Select

Regular discussions around software development, consultations around software engineering, security architectures, open source development or designing large scale software applications