The lab
Research
Notes from the Altumptic lab: security design of our products, reverse engineering and vulnerability research, published after fixes ship.
Notes
- Phobia Wallet: security design notesHow Phobia Wallet keeps keys on your device, hides your IP and proves its downloads are genuine — and what it does not protect yet.
- LemonSees: why the SSH session is the agentWhy LemonSees watches servers through a normal SSH login instead of installing software on them — the trade-offs, and its known limits.
What we work on
Reverse engineering
Binaries, firmware and protocols taken apart to learn what they really do. Write-ups follow the disclosure rules below.
Vulnerability research
Fuzzing and root-cause analysis of real software. Findings are reported to the vendor first and published only after a fix ships.
Product security notes
How our own products defend users — including the parts that are not finished yet.
How we publish
Research on someone else's software is done only with permission or under a published disclosure program, reported to the vendor first, and published after a fix is available — or after 90 days if there is no response. Have something for us? See the security page.