On marketing claims nobody checks, the 1,000 projects Anthropic never listed, and why an industry full of experts followed along.
Unauthenticated SQL injection reachable in Drupal core.
Reading arbitrary files pre-authentication, as root, on cPanel.
A reproducible lab for Jolokia XSS, JNDI remote code execution, and recovering credentials from Java heap dumps.
An MCP server that turns your HackerOne report history and public disclosures into a starting point for your next bug bounty hunt.
A platform that brings together vulnerability disclosures, exploit activity, and threat context to help teams decide what to investigate first.
My security consulting practice, covering penetration testing, security advisory, bug bounty programmes, and vulnerability triage.
