Rıza Sabuncu
Rıza Sabuncu is an individual security engineer and open-source creator, not a company. His public work focuses on offensive security, security research, bug bounty work, and practical tools that help AI agents and researchers audit systems safely.
At a Glance
- Security engineers and penetration testers
- Bug bounty researchers
- OSINT practitioners
- Developers using AI coding agents
- +1 more
AI Tools by Rıza Sabuncu
(1)
ai-disk-cleanup
Disk Cleanup Prompt for AI Agents
Discussions
No discussions yet
Be the first to start a discussion about Rıza Sabuncu
Latest News
ai-disk-cleanup strengthened its explicit-approval safety rule and removed forced worktree deletion behavior.
macOS-TBM was updated as a research-beta tool for mapping macOS launchd and Mach/XPC attack surfaces.
indexleak-scanner received a major prompt and reporting overhaul, adding stricter scanning protocol, progress reporting and anti-skip checks.
indexleak-scanner documentation added setup instructions for Claude and other MCP applications.
Products & Services
An open-source, battle-tested prompt that turns AI coding agents such as Claude Code, Cursor and Codex into careful disk-space auditors. It measures storage top-down, groups findings into risk tiers, uses platform-specific cleanup commands, and requires explicit approval before deletion; it supports macOS, Linux and Windows and includes prompts in seven languages.
An AI-powered directory-listing scanner for cybersecurity and OSINT. It exposes an MCP tool (including enter_directory), performs structured scanning and risk classification, and integrates with MCP-compatible applications such as Cursor and Claude Desktop.
A research-beta open-source tool for static launchd and Mach/XPC attack-surface mapping. It correlates launchd plists, Mach-O structure, code signatures, entitlements and Mach/XPC signals into review queues and service dossiers.
A Go-based JavaScript scanner that can scan one or many JavaScript files and output HTML or JSON, including parallel scanning and debug modes.
Market Position
Sabuncu's work is positioned as independent, open-source and research-oriented: practical security tools and prompts that can be inspected and run locally, with MCP support for AI workflows. ai-disk-cleanup differentiates itself from simple du/sort or cache-cleanup checklists through top-down measurement, risk tiers and approval gates; indexleak-scanner and macOS-TBM overlap with other MCP security scanners and commercial/static reverse-engineering tooling but emphasize transparent, researcher-controlled workflows.
Leadership
Founders
Rıza Sabuncu
Offensive/Senior Offensive Security Engineer; LinkedIn search results identify him with Trendyol Group and Yaşar University (2015–2018), while his official site describes him as an Offensive Security Engineer. His public work also includes software development, open-source security tooling, and Apple bug-bounty research.
Executive Team
Rıza Sabuncu
Offensive Security Engineer / Open-source creator
Official site identifies him as an Offensive Security Engineer; broader profile results associate him with Trendyol Group, Yaşar University and software-development work.
Founding Story
This is a personal portfolio and open-source project practice rather than an incorporated venture. Sabuncu presents himself as a security engineer who builds tools, publishes research, and explores systems; the recent AI disk-cleanup project was created to turn an AI coding agent into a measured, tiered, approval-based disk auditor.
Business Model
Revenue Model
The reviewed public materials describe free/open-source repositories and prompts rather than a commercial subscription, API or license business. The ai-disk-cleanup README links to an optional Buy Me a Coffee support page.
Pricing Tiers
Public GitHub repositories and MIT-licensed projects include ai-disk-cleanup, indexleak-scanner and macOS-TBM.
Target Markets
- Security engineers and penetration testers
- Bug bounty researchers
- OSINT practitioners
- Developers using AI coding agents
- macOS reverse-engineering and security researchers
- Offensive-security and application-security testing
- Bug bounty and responsible vulnerability research
- OSINT and exposed-directory discovery
- AI-assisted security analysis in Cursor, Claude Desktop and other MCP clients
- macOS launchd/Mach/XPC research and attack-surface triage
- Safe disk-space auditing and cleanup for developers
- Apple is a notable security-program context: Apple publicly credited Rıza Sabuncu in its web-server security acknowledgements; this is recognition of vulnerability reports, not evidence of a customer relationship.