Research

Vulnerability Research

We examine software directly to find flaws before they appear in advisories.

The work

What this actually involves

The target determines which methods matter.

  • Target selection

    Prioritise deployed, reachable software worth investigating.

  • Attack surface mapping

    Map where untrusted input enters the software.

  • Source and binary review

    Examine source code or shipped binaries.

  • Fuzzing and harnesses

    Build harnesses that reach relevant code, then fuzz it.

  • Patch diffing

    Compare releases for hidden or incomplete fixes.

  • Triage

    Separate meaningful findings from duplicate or harmless crashes.

Next

How it runs, and how to commission it

Every project follows the same process and disclosure terms.

How research runsCommission this work

Ask about vulnerability research

Tell us what the target is and what you need to know about it.

Start a conversation