Web security
Breaking authorization boundaries in modern APIs
Planned research exploring practical attack techniques, testing methodology and defensive lessons.
In progressResearch
Research that makes every pentest sharper.
What we learn breaking one system feeds the next engagement. These write-ups are in progress — techniques, testing methodology and the defensive lessons that came out of them.
Research library
Practical thinking for real engagements.
- Cloud security
Understanding attack paths across cloud IAM
Planned research exploring practical attack techniques, testing methodology and defensive lessons.
In progress - AI security
Practical security testing for LLM applications
Planned research exploring practical attack techniques, testing methodology and defensive lessons.
In progress - Mobile security
Mobile runtime security testing
Planned research exploring practical attack techniques, testing methodology and defensive lessons.
In progress - AppSec
Business logic vulnerabilities beyond the OWASP Top 10
Planned research exploring practical attack techniques, testing methodology and defensive lessons.
In progress