Curious by default.
The interesting bugs are often hiding in the assumptions. We test what happens when users, roles, APIs and features interact in ways nobody originally planned for.
ABOUT // HAK-MZ
Built from research, not slogans.
HAK-MZ is an independent Offensive Security team. We work hands-on: testing real systems, researching edge cases and looking for the kind of mistakes that become serious when an attacker connects the dots.
ABOUT HAK-MZ
Built from research, not slogans.
We care about the part of security work that happens after the scanner finishes. We dig into behavior, trust boundaries and business logic, then follow the paths that could turn a small weakness into a real compromise.
Evidence over noise.
Automated tools are useful. They are not the verdict. We validate important findings by hand, reproduce them and work out whether they lead to something that actually matters.
Clear enough to act on.
A good report should make sense to the person fixing the bug. We keep the technical detail, but explain the attack path and impact without hiding behind jargon.
WHAT MATTERS TO US
Think like an attacker. Talk like a human.
By the end of an engagement, you should know where the real entry points are, what they lead to and which fixes are worth doing first.
- 01Technical depthManual research and practical exploitation where it adds value.
- 02Business contextTechnical weaknesses are connected to real assets, users and impact.
- 03Direct communicationClear technical conversations with the people responsible for fixing the issue.