our mission
Dataflow Security is a boutique offensive R&D firm that specializes in providing novel and cutting-edge research to its clients to keep society safe.
about us
We are a front-runner with a proven track record in finding and exploiting vulnerabilities in most popular mobile products for many consecutive years. The source of our knowledge is our vast experience with the overall mobile platforms’ architecture, their subsystems and subcomponents, and the interaction between them.
services
Vulnerability Research
Our researchers will collaborate with your internal research team to achieve their goals in an efficient and productive way.
You may want to retain our services in case:
- You’re having difficulties in finding a vulnerability in a complex codebase
- You’re lacking internal researchers / know-how in a specific area of the codebase
- You need help reversing and analyzing a closed-source piece of code
Exploit Development
Below are the use cases for retaining our exploit developers:
Exploiting
You have an exploitable bug, but it is hard to exploit it
Optimizing
You have an exploit and you need to optimize its reliability and/or execution time
Porting
You have an exploit that needs to be ported to different vulnerable device models
Chaining
You have a couple or more exploits that need to be chained
Training Services
We provide training services tailored to your specific needs.
contact us
Business Inquiries
Please note: our services and exploits are available only to government agencies and their certified vendors.
[email protected]
- (Download Public Key)
Found a bug (crash) in iOS or Android?
Reach out to discover its current value.
[email protected]
- (Download Public Key)
job inquiries
For more details on how to apply, contact us at:
[email protected]
- (Download Public Key)
senior security researcher
We are looking for security researchers with vast experience in vulnerability research, reverse engineering, and exploit development around mobile browsers, messaging apps and operating systems.
Who should apply for this position?
Researchers who have managed to find an impactful vulnerability (e.g., RCE or sandbox/privilege escalation) in a mobile browser, mobile messaging app or Android/iOS kernels during the last 24 months. Must have deep knowledge of memory corruption vulnerabilities. Deep knowledge of exploitation is a plus, but not required.
Benefits
- Work with a team of highly skilled and internationally renowned experts
- Flexible work hours
- Fully remote position