Metabase Cloud: The winner takes it all
We could have pwned every Metabase Cloud tenant by chaining an H2 INIT sanitizer bypass into RCE, then cloud misconfigurations into a full multi-tenant cluster compromise.
14-day free trial · No credit card required
Continuously surfaces exploitable vulnerabilities in pull requests, with enough context for your security team to triage and prioritize without chasing down developers.
Learn More
$40/ developer / mo.
Detect vulnerabilities automatically in your development workflow.
No credit card required
50 PRs (unlimited scans per PR) per developer, $1 per additional PR
Fix with AI using prompts delivered in PR comments
Auto-assigns coverage to new developers on their first PR
GitHub, GitLab, and Bitbucket integrations
Enterprise-grade modules with custom rule configuration per repo
Custom integrations with your existing security toolchain
SSO, audit logs, and role-based access controls
24/7 priority support with a dedicated account team
HTAI-001
Pre-Authentication Remote Code Execution via deserialization vulnerability in BeyondTrust Remote Support and Privileged Remote Access (PRA) products.
We could have pwned every Metabase Cloud tenant by chaining an H2 INIT sanitizer bypass into RCE, then cloud misconfigurations into a full multi-tenant cluster compromise.
Why AI is broadening the attack surface across OSS, new SaaS, and fast-shipping teams, and how to position yourself with an assume-breach mindset.
We ran the same scan Doyensec used to test XBOW and Aikido, for a tenth of the price. Here's how our $350 AI pentest compared.
How AI-assisted reverse engineering of stripped PAN-OS binaries led to finding a JWT algorithm confusion vulnerability in GlobalProtect's Cloud Authentication Service, enabling full VPN auth bypass with just a username.
14-day free trial · No credit card required