secure
Finding what scanners miss.
Security research and tooling — business logic flaws, IDORs, and manual audits, not just automated scans.
scan-session
focus
IDORRLS bypassRace conditionsAuth flaws
approach
manual logic review first, tooling second. scanners find syntax — not broken business rules.
hackerone
@inputhunt →
VibeGuard
TypeScript static analysis tool for PostgreSQL/Supabase apps — detects IDOR, RLS bypass, search-path hijacking, and multi-tenancy isolation issues.
TypeScriptNode.jsStatic Analysis
CryptoLab
Browser-based crypto toolkit with ASCII, JWT forging, keypair generation, and steganography modules — zero dependencies, Web Crypto API only.
Web Crypto APIVanilla JS