rahulm.
Rahul MHi, I’m Rahul.
Product builder. Chennai.

I design, build, and sell products.
From zero to one.

With a lot of care for the pixels and the UX.

Founding engineer at Hero ↗Previously, six years at Product Hunt ↗

01 / Independent product

BakdGood work. Good words.

Your projects, backed by the people who know your work. Together on one page.

Explore Bakd
My Bakd profile ↗

02 / Independent product

MaaaA little care.

Eat. Drink water. Take a break.
A familiar voice, tucked into your Mac’s notch.

Meet Maaa

03 / Independent product

Kofe FlowA little more focus.

A native Mac timer. Thoughtful controls.
Less getting in the way.

Find your flow
Kofe Flow’s actual Mac timer, with 25:00, Start Focus, and Take Break controls

In good company.

Hero ↗

Founding EngineerApr 2024–present

At Hero, I’m helping make secondhand selling feel simple. I build the systems that take an item from a scan to a listing, and work on the product decisions around pricing, subscriptions, and how people find us. That includes the marketplace extension and Hero Shop.

Product Hunt ↗

Senior Engineer / Associate Team LeadNov 2017–Jan 2024 · Six years

Product Hunt taught me how product, engineering, and community fit together. I built Promoted Products from scratch, worked on how people discover new products, and later led engineers alongside the product and design teams.

On my desk lately

Tinkering with ML.

Learning the maths, trying things out, and occasionally getting a neural network to cooperate.

The collection

More work.
More curiosity.

Other projects, responsibly reported security bugs, and press.

Security research 11

All findings below were responsibly reported.

  • GoogleCross-site scripting in Google Translate
  • AppleSafari Safe Browsing issue
  • MetaGroup files visible without permission
  • MetaGroup chat accessible without permission
  • MetaCross-site request forgery in search
  • AmazonClickjacking across public pages
  • UnitedAccount takeover issue
  • eBayReflected cross-site scripting
  • FlickrGroup invitation accepted without consent
  • HackerRankStored cross-site scripting in profiles
  • MediaFireSSL protection could be disabled without consent
Press & stories 07
Times of IndiaHoming in on Bug BountiesOutlook IndiaFrom finding bugs in Apple and Google to building at Product HuntThe Next WebTagsdock is every social media maven’s dream keyboardHackReadExposing an account takeover issue at United AirlinesDeccan ChronicleCantering in CyberspaceDeccan ChronicleDealing with the Dark WebDeccan ChronicleThere Is No Wall to Stop Piracy
Other projects 07
SontriA safer Safari.BlixyA more personal iPhone keyboard.TagsdockHashtags, without all the typing.SnapViewVideos, reframed for vertical sharing.BuzzminerDifferent sources. More perspectives.GiflessWords and emoji, in motion.CowBullA little word-guessing game.
A few milestones 04

Have something in mind?

Let’s make
something great.

hello@rahulm.me