services

Small, senior, evidence-driven engagements.

• Web & app pentest — auth, business logic, injection; findings ship with reproducers
• Source-code audit — manual review plus variant analysis; root cause and fix per finding
• Custom tooling — fuzz harnesses, scanner glue, CI security checks
• Technical writing — deep-dive research and disclosure-style writeups

Email security [at] skeletonsec [dot] com — fast yes/no and a scoped quote.