Work

What you can hire us for

Research, exploit development, and tooling. Scoped and quoted by the target.

Engagement

Commissioned research

Find flaws in software you build, own, or use.

A fixed research window against an agreed target.

  • Target and time window agreed in writing
  • Attack surface mapping, code review, and harnesses as needed
  • Working reproduction for every finding
  • Reports covering cause, reachability, impact, and fixes
  • Debrief with your engineers

Findings are not guaranteed. An empty window still comes with a report of what was covered.

Scoped in weeks, agreed in writing · Scoped and quoted

Engagement

Exploit development

Find out whether a reported flaw is exploitable.

Test a known flaw and establish its impact.

  • Reliable reproduction
  • Root cause analysis
  • Practical impact and reachability
  • Existing mitigation checks
  • A bounded proof of concept

The answer may be that the flaw is not exploitable. We report that plainly.

Scoped against the specific flaw · Scoped and quoted

Engagement

Tooling built to order

Get the tools your research team is missing.

Target-specific harnesses, fuzzing, triage, and instrumentation.

  • Harnesses for relevant code paths
  • Fuzzing setup and corpora
  • Crash triage and minimisation
  • Behavioural instrumentation
  • Handover to your engineers

Built for your team to run and maintain.

Scoped against the target and the handover · Scoped and quoted

Not this

Three things this is not

For application reviews, contact Skull Solutions.

  • Testing an application you run

    Skull Solutions handles application security reviews.

  • Exploits against software you do not own

    We require the owner's written authorisation.

  • Anything sold onward

    We do not sell undisclosed flaws. The vendor hears first; the public follows.

Skull SolutionsWhere our work stops

Scoping

Nothing starts because you sent an email

Scope and price are agreed before work begins.

  • Describe the target

    Tell us what it is and whether you own it.

  • We check the fit

    We confirm it falls within our scope.

  • Agree the scope

    We set the window and boundaries in writing.

  • Get a quote

    We quote for time, never a promised finding.

  • Decide

    Work starts only with your approval.

Third-party targets require the owner's written authorisation.

Describe the target

What it is, whether it is yours, and what you need to know about it. A paragraph is enough.

Start a conversation