CONFIDENTIAL

FILE — SEC.ACADEMY / INTAKE / 2026

CLASSIFICATION — RESTRICTED

HANDLER — INDEPENDENT_OP_01

SLA — 168H / 7D MAX

CAPACITY — 2 / 4 SLOTS

ENCRYPTION — AT-REST + IN-TRANSIT

Request
an audit.

Built for vibe coders, solo SaaS, AI apps.
From ₩99,000. Up to 102 items.

// Audits for Cursor · Claude Code · Lovable · v0 · Bolt sites / Supabase RLS / Next.js CVE-2025-29927 / AI prompt injection

// One operator, manual audit · KISA Class 1 AI Security Talent · 10y public sector SOC · Korean PG/PASS/PIPA specialist

// LAST CASE — REDACTED CLIENT

6.0 / 10 RISK SCORE

CRIT

HIGH

MED

LOW

§ 01 — SCOPE OF ENGAGEMENT

Choose your audit scope

REQUIRED · 1 / 3

⬛ LITE FAST

₩99,000 / each

Vibe Coder · LITE

21-item automated audit (Korean PG / Kakao OAuth included). Optimized for Cursor/Lovable sites.

└ Supabase RLS · secret exposure

└ AI keys · sourcemap · headers

└ Half day + AI-prompt report

POPULAR

▤ STANDARD BALANCED

₩299,000 / each

Solo SaaS · STANDARD

58 items (LITE + Next.js CVE / payments / OAuth / API / SAST). Whitebox if source is shared.

└ Next.js CVE-2025-29927 · Toss webhook

└ BOLA · JWT · OAuth state

└ Semgrep · TruffleHog · 1~2 days

▣ DEEP THOROUGH

₩790,000 / each

SaaS / Edu / Marketplace · DEEP

71 items (STANDARD + privilege escalation / race / kill chain / PASS bypass / PoC video). 1-hour video debrief.

└ IDOR · race · kill chain

└ +mobile ₩300K · +cloud ₩800K+

└ 3~5 days + 1h video

// ADVANCED — bespoke

Autonomous AI pentesting + Red Team · From ₩1,500,000 · Isolated environment · Explicit consent required · 1+ week

§ 02 — INTAKE

Enter your case details

FORM · 09 FIELDS

01. NAME / Name REQUIRED

⚠ Name — please enter.

02. COMPANY / Company · Service name REQUIRED

⚠ Company or service name.

03. TARGET_URL REQUIRED

⚠ Please enter a valid URL format (including https://))

04. ADDITIONAL_TARGETS / Additional targets OPTIONAL

05. STACK / Tech stack OPTIONAL

06. SCHEDULE / Schedule REQUIRED

⚠ Please select a desired schedule.

07. CHANNEL / Contact channel REQUIRED

⚠ Contact channel — please select.

08. CONTACT / Contact REQUIRED

⚠ Please enter your contact channel details.

09. MEMO / Additional notes OPTIONAL

// NOTICE

Your submission is Encrypted at rest, and erased within 90 days after audit completion. This inquiry is Pre-contract consultation, and an NDA is signed before the audit begins.

ENCRYPTED → INTAKE_QUEUE

Prefer email instead? → [email protected]

§ 03 — TRACK RECORD

Transparent records.
No fake numbers.

A small operator. We show what we have, accurately..

CASES TOTAL

Edu management service

CRITICAL

Found / Fixed 04

HIGH

Found / Fixed 05

MEDIUM

Found / Fixed 06

Requestan audit.