Hash Security

Securing your company before an attacker ever reaches it.

Offensive and defensive security, secure development, cloud and compliance.

Start
protection

Request an engagement

/request-services

Website

hash-sec.com

Services, research and training in full

Latest research

The `use cache` RCE: how a typed-array bug in Next.js became remote code execution

  • security
  • nextjs
  • react
All research

Services

Penetration testing, red teaming, AI security, SOC and incident response, and four more

/services

Training

Courses, workshops for your team, and the internship

/training

Hash Academy

Offensive, defensive and web security paths with hands-on labs, graded exams and a verifiable certificate

hashacademy.co

7 profiles

Follow the research

@hash_s3c on X

Research threads and disclosures as they land

x.com

LinkedIn

Company news, engagements and training cohorts

linkedin.com

GitHub

Tools and proof-of-concept code from the posts

github.com

Hacker News

Our submissions and the comment threads around them

ycombinator.com

Reddit

Our research posts and the discussions around them

reddit.com

Instagram

Workshops, events and the team behind the work

instagram.com

Beirut, Lebanon

33.8938° N / 35.5018° E

Asia/Beirut local time