Insha Jabeen. The hands on the keyboard.

Medusa started where most security careers do. Deep in tutorials, late at night, breaking things nobody was supposed to. That turned into writing. Over 4+ years of cumulative work at Akto, the team shipped technical content for pentesters and developers on API security and OWASP issues, and realized most security content on the internet was written by people who had never actually exploited the thing they were describing. So Medusa started making its own.

The Medusa YouTube channel began as a way to share what we were learning. CVE breakdowns, bug bounty walkthroughs, real attacks from real reports. Along the way Insha ran a six-month security research internship at Traceable by Harness (Nov 2024 to May 2025), running internal pentests, API assessments, and detailed remediation reports. Medusa has published public writeups of HackerOne findings, including a $3,000 IDOR in a delivery app, and hosts the Snake Bytes podcast. 42,000+ people subscribe to the channel.

Medusa is the next step. The studio version of what started as a channel. If you are a security brand building in public, and you want content that earns respect from the people you are selling to, you are in the right place.