Attack surface intelligence.

Nullform models how production systems fail at the trust boundary.

Disclosures

Property management platform

Broken access controls exposing tenant PII. Scope under assessment.

Disclosed to NCSC-FI.

Transport platform #1

Broken tenant isolation exposing vehicle data, real-time GPS tracking, and PII.

Disclosed to vendor and NCSC-FI.

Booking & payments platform

Several payment flow bypasses.

Disclosure pending.

Transport platform #2

Broken access controls and tenant isolation exposing user PII and global fleet GPS data.

Disclosure pending.

Civil registry platform

Weak security controls allowing interception of sensitive personal records in transit.

Disclosure pending.

Contact

PGP
09C1 F2EE 4372 E577 2332 B75E B37C 0D33 7B4B A485 Public key