Closed — Private source — described by architecture only2025 — now
Security auditor & developer
- Client
- An internal operations platform tested the way an attacker would test it — and a meeting notetaker rolled out to every team in the company.
- Recruiter
- Security auditor and black-box tester across the ERP's whole role-based access model; also integrated Fireflies as the company-wide AI notetaker, organised by team.
- Engineer
- Black-box and role by role, with no source access: I found three separate paths from a standard account to admin.
What it does
- Every role tested for what it could reach that it should not
- Three privilege-escalation paths to admin found before anyone else found them
- Meeting notes captured automatically across the company through Fireflies
Under the hood
- Tested from the outside only — what a real user or attacker would see, nothing more
- Role boundaries probed across every screen and action, not just the ones the UI offers
Built with
- Black-box testing
- Role-based access control
- Privilege escalation
- Fireflies
Signal path
source private — architecture onlySource is private. Happy to walk through the architecture on a call — ammadtehseenkhan@gmail.com