We find real vulnerabilities in real applications.
Ambit is an independent web application security practice. We research web applications and report what we find to the vendor.
Application assessment/Authorization review/API security
Dylan McGuinness. Application security, based in the United States. LinkedIn
OSCP (OffSec Certified Professional)Vulnerabilities we find outside a paid engagement are reported privately, at no charge. We do not publish them, sell them, or use them as leverage.