What we do
Our work consists of three major strands.
Bug bounties
Fully funded bug bounty programs for charities and NGOs, from first scan to remediation.
Read more →Exploit research
Finding previously unknown vulnerabilities in public infrastructure, and training the researchers who do it.
Read more →Incident response
Identifying vulnerable systems at scale, contacting their owners, and assisting organisations that have been compromised.
Read more →