Responsible Disclosure
Security Research Program
Through our responsible disclosure program, we identify and report security vulnerabilities to major technology companies. Our research helps strengthen the security ecosystem while demonstrating our offensive security capabilities.
Data Exposure
Identified a security flaw allowing unauthorised access to sensitive repository data, reported to GitHub Security.
Security Flaw
Reported a critical security vulnerability in Atlassian's platform affecting access to sensitive project data.
Account Takeover
Identified an account takeover vector in Microsoft's authentication flow, reported through Microsoft MSRC.
Access Control Bypass
Discovered a bypass mechanism in GitHub Copilot's access controls, enabling unauthorised feature access.
Business Logic Flaw
Found a business logic vulnerability allowing bypassing of Copilot subscription pricing controls.
Security Finding
Discovered a security issue in Wiz's cloud security platform, responsibly disclosed to their security team.
Access Full Write-Ups
Detailed technical write-ups, proof-of-concept code, and remediation guidance are available exclusively in the Member Zone.
Access Member Zone