At simply 13 years outdated, Dylan grew to become the youngest safety researcher to collaborate with the Microsoft Safety Response Heart (MSRC). His journey into cybersecurity is inspiring—rooted in curiosity, resilience, and a deep want to make a distinction.
Early beginnings: From scratch to safety
Dylan’s fascination with know-how started early. Like many children, he began with Scratch—a visible programming language for making easy video games and animations. However for Dylan, Scratch was greater than a toy; it was the beginning of a a lot greater journey. He rapidly moved on to HTML and different languages, and by fifth grade, he was analyzing supply code behind instructional platforms. One experiment—unlocking video games earlier than finishing the teachings—landed him in a little bit of hassle but additionally sparked a rising curiosity in how techniques work.
That curiosity solely deepened in the course of the COVID-19 pandemic. When his faculty disabled pupil entry to create Groups conferences, Dylan discovered a workaround utilizing Outlook. It wasn’t about bypassing guidelines—it was about serving to classmates keep related in a time of isolation. It was a glimpse of the problem-solver he was changing into.
When his faculty later disabled student-created Groups chats, Dylan didn’t quit—he obtained inventive. What started as a quest to revive communication choices grew to become his introduction to safety analysis. After 9 months of self-teaching, exploration, and trial and error, he found a vulnerability that allow him take over any Groups group. That breakthrough marked his entry into the world of accountable disclosure—and kicked off his relationship with MSRC.
Quickly after, Dylan submitted his first official vulnerability report back to Microsoft. In response, the Bug Bounty group up to date its program phrases to permit participation from researchers as younger as 13. Since then, Dylan has labored intently with MSRC, demonstrating technical perception and professionalism effectively past his age.
Dylan’s communication abilities are as spectacular as his technical ones. He’s identified for respectfully pushing again when he disagrees with MSRC’s preliminary assessments—all the time aiming to grasp their perspective and articulate his personal clearly. This considerate method has earned him respect and helped drive significant outcomes.
One notable instance: Dylan submitted a vulnerability within the Authenticator Dealer service that was initially thought-about out of scope. By clear, constructive dialogue, he helped MSRC perceive its broader implications. The consequence? Not solely was the problem acknowledged, however the bounty program additionally expanded its scope to incorporate it for future submissions—a testomony to Dylan’s impression.
Regardless of his achievements, Dylan’s path hasn’t been simple. He’s confronted misunderstood studies and setbacks, however credit his household—particularly his mom, father, stepparents, and grandparents—for serving to him keep grounded, affected person, {and professional}.
His journey hasn’t simply been technical. In the course of the pandemic, Dylan additionally misplaced his voice as a consequence of a well being problem and underwent two surgical procedures to get well it. The expertise solely strengthened his resolve and resilience.
Now a junior in highschool, Dylan balances schoolwork with extracurriculars like Science Olympiad, math competitions, swimming, biking, and cello. He filed 20 vulnerability studies final summer time alone—up from simply six complete beforehand.
He’s been named to MSRC’s Most Precious Researcher record for each 2022 and 2024. In April 2025, Dylan competed at Microsoft’s Zero Day Quest—a premier onsite hacking occasion in Redmond, Washington—and took residence third place, an unimaginable achievement that positioned him among the many high researchers globally.
Regardless of a busy educational schedule, Dylan continues to see safety analysis as a rewarding interest. He’s enthusiastic about studying, exploring new vulnerabilities, and giving again to the neighborhood. Lengthy-term, he’s open to a variety of prospects, together with continued work in cybersecurity, science, or civics.
Dylan additionally goals of attending safety conferences as quickly as he’s sufficiently old, keen to fulfill fellow researchers and be taught from one of the best. For different younger researchers, his story is proof that age isn’t any barrier—what issues most is creativity, persistence, and a willingness to be taught.
