Security methodology
Baseline design, matched controls, reproduction, readback, and cleanup.
Case Studies
Redacted case studies grounded in validated findings.
Seven public case studies document findings from authorized assessments while withholding target identities, sensitive endpoints, credentials, PII, and raw evidence.
Published security case studies
Published case studies
1 High · 4 Medium · 2 Low
01Anonymous Registration Creates an AdministratorAccess Control · Administrative PrivilegeAn anonymous actor could register as an administrator and perform administrative operations on researcher-owned synthetic records.High02Verification Link Poisoning to Pre-Account TakeoverIdentity · Verification LifecycleA controlled authority mutation redirected an official verification link to an audit canary before the verified account state was confirmed.Medium03Restricted Token Crosses an Account Credential BoundaryAuthorization · Credential BoundaryA restricted token could read account-level credentials and revoke one disposable credential owned by the researcher.Medium04Descendant Credential Remains Active After RevocationLifecycle · Cascade RevocationThe source credential was rejected after revocation while its descendant token still produced an owner-confirmed state change.Medium05Standard Role Changes Project-Level ConfigurationAccess Control · Project GovernanceA standard user changed project-level configuration; the owner independently read back the durable change and restored the baseline.Medium06Production Source Artifact DisclosureExposure · Production ArtifactApplication source and internal workflow structure were recoverable without authentication from a production build artifact.Low07Cross-Origin Redirect Through a Language SelectorNavigation · URL InterpretationA trusted-origin language selector could navigate the browser to an external origin controlled by the researcher.Low
Research focus
Ongoing
Continuing research focus
Web & API security
Authentication, authorization, business logic, and object relationships.
Lifecycle research
Session behavior, deletion, revocation, expiry, and durable state.
Evidence validation
Separating observations and operational primitives from reportable impact.