Security researchWe find real flaws for real organizations.
We’ve worked with organizations including Ubiquiti, WordPress and GitLab to resolve potential security vulnerabilities we found and reported, and we’ve reported potential vulnerabilities in the Government of Ontario’s own systems through its disclosure program.
It’s the same work we do in a penetration test, pointed at software and systems that many businesses rely on.
How we disclose
Responsibly, and by each program’s rules.
- 1
Find
Within the rules of the organization's bug bounty program or disclosure policy.
- 2
Report privately
To the organization first, with the steps to reproduce and how to fix it.
- 3
Give time to fix
We work with their team, and never publish details of an issue that isn't fixed.
- 4
Mention only with permission
We name an organization only where its program allows it.
Local research
We found 14 hacked local websites
Hidden casino pages and spam links on real Hamilton-area business sites, and what the owners did next.
Report a vulnerability to us
Found a security issue in cyberbadger.ca, BadgerScan or another of our services? Email [email protected] with the steps to reproduce it. Please don’t share it publicly until we’ve fixed it.
- We read every report and reply as soon as we can, usually within a few business days.
- We won’t take legal action against good-faith research that avoids harm to our users and their data.
- Our contact details are also in security.txt.
Want us to look at your systems?
Book a free scoping call. We agree on what to test and when, put it in writing, and quote it before anything starts.