// research

Hall of Fame & Responsible Disclosures

Our researchers have been publicly acknowledged by leading global organizations for discovering and responsibly disclosing critical security vulnerabilities — through programs on Bugcrowd, HackerOne, Synack, and direct vendor channels.

Adobe Apple Cisco Lenovo Walmart U.S. Government AT&T Seek SeatGeek eBay Porsche Motorola CDAO IBM Carfax Fitbit Segment Mastercard Pinterest GoPro Adobe Apple Cisco Lenovo Walmart U.S. Government AT&T Seek SeatGeek eBay Porsche Motorola CDAO IBM Carfax Fitbit Segment Mastercard Pinterest GoPro

250+

Companies Acknowledged Us

800+

Valid Vulnerabilities

150+

Critical / High Severity

12+

Years of Active Research

// disclosure

Responsible by default

We follow coordinated disclosure: findings go to the vendor first, with a fair remediation window before any public detail. If you run a security program and want to work with us — or you've received a report from a Xowia researcher — reach out and we'll coordinate.

Contact Research Team security.txt

root@xowia: ~/disclosures

$ cat policy.txt [+] Report privately to vendor [+] Allow remediation window [+] Coordinate public disclosure [!] No exploitation beyond PoC $ _

Want researchers like these on your side?

The same people who find bugs in the Fortune 500 can test your product.

Request a Pentest