Software security research, and the tools we build for it.
What we do
Vulnerability research
Finding bugs in software we don't own; disclosing them responsibly.
Supply chain
Provenance and CI hardening, shown on our own releases.
Tooling
Open-source security libraries, released when ready.
Tools
- go-avscan: asks the machine's antivirus about a folder: AMSI, clamd, or a command you name.
- go-keyring: one credential store for a Go desktop app, with a sealed-file fallback inside Flatpak.
- go-codepair: pairs two devices on a LAN with a short typed code.