The work, experience and learnings
Details from our engagements across cloud, application, fintech, DeFi, Web3, SaaS and more with findings, and outcomes.
Every engagement
50 findings, 48 closed on retest
Web application and API pentest across an AI-powered B2B procurement platform.
Read the case study → CROSS-BORDER PAYMENTS AND CUSTODYFive live attack scenarios, no successful breaches
Phishing and crypto dusting simulation against a custody operations team.
Read the case study → CRYPTO-FRIENDLY NEOBANK42 findings across a full AWS environment
Full-infrastructure AWS audit from the root account down.
Read the case study → DEFI STABLECOIN PRIVATE CREDITWeb, API, and cloud, reviewed as one system
Dual-track web, API, and AWS cloud audit before launch.
Read the case study → REAL ESTATE TOKENIZATION AND WEB3Two platforms, 28 findings, before onboarding began
Investor dashboard, admin portal, AWS audit, and a red team simulation for a tokenization platform.
Read the case study → FLEXIBLE WORKSPACE SAASA coworking marketplace, reviewed end to end
Marketplace and booking platform security engagement.
Read the case study → CONSUMER BRANDS, SMART APPLIANCES, AND IOTFourteen products, one enterprise-wide program
11 mobile apps and 3 web systems audited across a consumer electronics portfolio.
Read the case study → AGRITECH AND AGRICULTURAL MARKETPLACEOne shared API key. Every farmer’s data
19 findings on a farmer-facing web platform and its APIs, fully remediated.
Read the case study → SPORTS TECHNOLOGY AND BETTING ANALYTICSSecurity for data that moves markets
A global sports data and betting analytics platform.
Read the case study → CRYPTOCURRENCY EXCHANGE (CEFI)46 findings, behind the trading screen
An internal backoffice pentest across a global exchange’s admin surface.
Read the case study → CRYPTO MARKET MAKING AND WEB3 INFRASTRUCTURETen-plus regions of AWS. Zero breaches
A global AWS audit plus a red team phishing simulation, VARA regulated.
Read the case study → DEFI TRANSACTIONS AND PAYMENT LAYERCaught on testnet, before the relay went live
An API security assessment of a gasless payment relay layer.
Read the case study → CRYPTOCURRENCY EXCHANGE (CEFI)Security for a high-volume exchange
A CeFi cryptocurrency exchange operating at high transaction volume.
Read the case study → WEB3 WALLET AND DEFI INFRASTRUCTURESecurity for a wallet holding other people’s assets
A Web3 wallet and DeFi infrastructure platform serving users globally.
Read the case study → WEB3 AND AI TOKEN LAUNCH PLATFORMCapx AI: a critical SSRF, fully closed before launch
Web, API, wallet auth, and Firebase, tested end to end.
Read the case study →