Track Record

What we find

Anonymized results from real security assessments across industries. Every finding verified with proof-of-concept reproduction.

Cryptocurrency ExchangeAuth Bypass

Findings

Critical

Password reset poisoning via X-Forwarded-Host header injection leading to full account takeover

EdTech PlatformIDOR

Findings

Critical

WAF bypass via mobile User-Agent exposed 500M+ user profiles through IDOR with sequential IDs

FinTech Payment PlatformAuth Bypass

Findings

Critical

Trailing slash path normalization bypassed authentication on 30+ endpoints across 10 microservices

Cloud Infrastructure ProviderInfo Disclosure

Findings

Critical

Unauthenticated Docker registry exposed 652 repositories with proprietary source code and infrastructure configs

E-Voting SystemCryptographic

Findings

Critical

Mock cryptography module enabled in production allowed forging election result signatures

SaaS Analytics PlatformAPI Security

Findings

Critical

CORS wildcard with credentials on 9+ hosts enabled cross-origin API token theft

Media Streaming CompanyInfrastructure

Findings

Critical

Five CloudFront subdomain takeovers via dangling CNAME records under parent domain

Healthcare PortalIDOR

Findings

Critical

Patient record IDOR through sequential appointment IDs exposed PHI across tenant boundaries

400+ targets assessed. 1,400+ vulnerabilities reported. 320+ critical-severity findings. All through manual testing — not scan dumps.