Research and disclosure
Security research
We contribute to a safer internet by responsibly disclosing vulnerabilities to major tech companies.
- Vulnerabilities reported
- 100+
- Major tech companies
- 4+
- Severity findings
- Critical & High
- Responsible disclosure
- 100%
Hall of fame and acknowledgments
Recognized by leading technology companies for responsible vulnerability disclosure.
- GoogleMultiple critical & high severity vulnerabilities reported
- MicrosoftSecurity vulnerabilities identified and reported
- NokiaApplication security vulnerabilities disclosed
- TecnoMobile security vulnerabilities reported
Research areas
Web Application Security
Authentication bypasses, IDOR, injection attacks
API Security
Broken access control, rate limiting bypass, GraphQL issues
Mobile Security
Insecure storage, certificate pinning bypass, deep link hijacking
Cloud Security
S3 misconfig, IAM escalation, metadata exploitation
AI/LLM Security
Prompt injection, data poisoning, model extraction
Our approach to responsible disclosure
We follow responsible disclosure practices in all our security research. When we identify vulnerabilities, we coordinate directly with vendor security teams, provide detailed technical reports, and allow reasonable timelines for remediation before any public disclosure. We contribute to CVE databases and work to improve the overall security posture of the digital ecosystem.
Interested in our research?
Collaborate with our security research team on vulnerability disclosure or red team engagements.