R.01
The #1 hacking team in the world
Ranked first worldwide in 2025 — the record behind every audit and every Vega finding we ship.
The record
Built by the world's #1 hacking team.
R.02
DARPA AI Cyber Challenge team lead
Leading a team in DARPA’s AI Cyber Challenge — autonomous systems that find and fix vulnerabilities at scale.
R.03
Two world firsts
World's first Android 17 root exploit, world's first nginx RCE exploit.
$300K+
Bounties paid by Google
Earned for vulnerabilities we found and responsibly disclosed.
Through the Vulnerability Reward Program (VRP), for findings from Kubernetes container escapes to Chrome browser remote code execution.
90+
CVEs found
And 100+ patches accepted in the Linux kernel.
Common Vulnerabilities and Exposures: the public registry of officially recorded security flaws.
20+
Top-tier publications & talks
Research presented at leading security venues.
Peer-reviewed papers at the top-four security venues (IEEE S&P, USENIX Security, CCS, and NDSS), plus talks at Black Hat USA, the Linux Security Summit, and Off-by-One Con.