A 28-year-old cybersecurity enthusiast from Denizli, Turkey, has caught the attention of NASA—not for launching rockets, but for protecting them. Hasan İsmail Gülkaya, a self-taught researcher with a background in industrial automation, discovered four serious security vulnerabilities in NASA’s systems. His findings earned him an official letter of appreciation from the world’s leading space agency.
How a Self-Taught Researcher Helped NASA Stay Secure
Hasan İsmail Gülkaya didn’t attend a top university or hold a fancy tech degree. He’s a vocational high school graduate trained in industrial automation. But what he lacked in formal education, he made up for in sharp cybersecurity skills and a passion for ethical hacking.
Through NASA’s official Vulnerability Disclosure Program (VDP), Gülkaya submitted detailed reports of four critical issues he found. This program allows independent researchers to responsibly report potential security risks without fear of legal action.
What Were the Vulnerabilities?
While the full technical details weren’t shared publicly, Gülkaya explained that:
- One vulnerability allowed unauthorized access to internal meeting details of NASA’s senior executives.
- The other three had the potential to cause serious financial damage to the agency if exploited by malicious attackers.
Thanks to Gülkaya’s early detection and reporting, NASA was able to fix the flaws before any harm was done.
NASA’s Response and Recognition
In return, NASA sent a formal letter of thanks, signed by the agency’s security chief. The letter praised Gülkaya for acting as a responsible and independent security researcher who followed all the right steps in reporting the issues.
“I reported the four vulnerabilities about two months ago,” Gülkaya said in an interview. “They told me they would fix them, and later I received the thank-you letter. It was very exciting for me.”
Impact on Gülkaya’s Career
For Gülkaya, this recognition isn’t just a personal milestone—it’s a career-defining moment. The letter from NASA has boosted his confidence and credibility in the cybersecurity world.
“This letter strengthened my career, and I plan to continue in this field,” he shared. His story is a powerful reminder that anyone with dedication, curiosity, and the right skills can make a global impact—no matter where they come from.
A Win for Ethical Hacking
This story also highlights the growing importance of ethical hacking and bug bounty programs in today’s digital world. Organizations like NASA rely on sharp-eyed independent researchers to find problems before cybercriminals do. These partnerships are becoming key to protecting sensitive data and systems.
Hasan İsmail Gülkaya’s journey from a small city in Turkey to being recognized by NASA shows the power of self-learning and responsible cybersecurity work. His actions not only helped protect a major space agency but also opened new doors for his future in tech. For young tech enthusiasts across the world, his story proves that determination and skill can truly take you places—even as far as NASA.
FAQs
1. Who is Hasan İsmail Gülkaya?
He is a 28-year-old cybersecurity researcher from Denizli, Turkey, known for discovering and reporting four serious security flaws in NASA’s systems.
2. What kind of vulnerabilities did he find at NASA?
One of the flaws allowed access to internal executive meeting details, while the others could have caused financial damage to the agency.
3. How did NASA respond to the reports?
NASA fixed the vulnerabilities and sent Gülkaya an official thank-you letter, appreciating his responsible and ethical approach.
4. What is NASA’s Vulnerability Disclosure Program?
It’s a program that allows independent security researchers to report system vulnerabilities without legal risks, helping NASA improve its cyber defenses.
5. How has this recognition affected Gülkaya’s career?
The thank-you letter from NASA gave a major boost to his cybersecurity career, motivating him to continue in this field professionally.















