01
Bug bounty hunting
Public programs on HackerOne, Bugcrowd, and direct VDPs. We chase chained, high-severity issues, not noise.
Independent offensive research
A small team hunting high-impact issues in public programs, private bounties, and web apps. Clear reports. Reproducible findings. No scanner dumps.
Four lines of work. Same standard: human-validated bugs with a path to fix.
Public programs on HackerOne, Bugcrowd, and direct VDPs. We chase chained, high-severity issues, not noise.
Invite-only and private bounties for teams that want extra coverage without a full consulting engagement.
Time-boxed assessments of web apps and APIs. Scoped, documented, and retested after you patch.
Writeups, talks, and training notes that explain the bug class so it does not come back.
A report should tell a story, not hand you a scanner dump. We reproduce every finding and leave you with the class of bug, not just the instance.
Auth, tenancy, APIs, and the glue between products. We spend time where scanners do not.
Business logic, access control, and multi-step chains. Automation only where it earns its keep.
Impact, steps, and a fix that retires the class. If we cannot reproduce it, we do not ship it.
We verify patches and, with your OK, turn the work into public writeups.
Selected notes will live here. Placeholder until disclosure windows close.