Authorized Web Application Research
Controlled investigation of an owned or explicitly authorized web application. Scope, rate, exclusions and state-changing actions are agreed before execution.
Services
Security research built around a defensible claim.
Every engagement starts with written authority and ends with evidence, limitations and a clear human decision.
Open-Source Security Review
Repository-focused analysis that cites exact source locations and treats patterns as hypotheses until impact is demonstrated in an authorized environment.
AI System Security Review
Review of agent tools, MCP interfaces, retrieval, memory and authorization boundaries for instruction injection and unsafe authority transfer.
Vulnerability Verification
Independent assessment of an existing security claim, including evidence quality, reproducibility, realistic impact and scope validity.
Security Research Reporting
Clear technical reporting for engineering teams, leadership or an authorized disclosure route. Reports never submit themselves.
Fit and authorization