Gareth Heyes is a web security researcher at PortSwigger, the makers of Burp Suite. He specializes in offensive web security, focusing on breaking the web in creative ways to help strengthen its defenses. His work involves fuzzing the edge cases of JavaScript, HTML, and browser parsers, often leading to the discovery of new methods to exploit overlooked features.

With over a decade of experience, Heyes has uncovered cutting-edge browser exploits, bypasses, and XSS techniques.