◆ cyber.cashlessconsumer.in
Agentic work Human-supervised AI on Zo Computer ▸ what this means

Everything on this site is agentic cyber work: AI agents running on Zo Computer plan the probes, execute read-only scans, analyse the results and draft the findings — predominantly on DeepSeek V4 Flash. A human steers and monitors every stage. No scan runs, no finding is disclosed and no text is published without human review and sign-off.

The machine does the legwork at speed and scale; the intent, the ethics and the accountability are human.

🔐 Independent security research · India

The cyber work behind CashlessConsumer

Open investigations into India's financial infrastructure: the leaks, exposures and registry blind-spots that institutions — and the people who depend on them — deserve to see. Every scan read-only, every finding disclosed responsibly, no consumer PII ever republished.

.bank.in security audit Our method & ethics
📡namespace recon

.bank.in security audit

The Indian financial namespace, mapped: 4,199 subdomains probed daily for resolution, HTTPS and exposure — plus the IDRBT registry investigation.

4,199 probed daily →
🛡️breach verification

Bank of Baroda breach

Independently verified the July 2026 Triple X dump at metadata level: 162K files, 1,088+ impacted branches. Full consumer investigation on the dedicated site.

162,111 files 1,088+ branches →
📄responsible disclosure

CERT-In · .env exposures

Production .env files served in plain sight on licensed banks' domains — reported to CERT-In and RBI, tracked to remediation.

1,393 hosts scanned 2 .env leaks →

Flagship sites

BoB breach investigation↗ IDRBT registry report↗ Live .bank.in search UI↗ bank-in-domains dataset↗