What we found, and how.

Original findings from real targets, published after the fix shipped. Every writeup shows the discovery path, the impact, and the remediation.

Nothing published here yet.

Run all of this against your own app.

GhostRecon does the checks in these articles automatically, across your whole attack surface. Free, bring your own model key, runs on your machine.