Doyensec

Doyensec, founded in 2017, is a specialized security firm with offices in San Francisco, USA, and Dogana, San Marino. The company provides extensive security audits for web applications, APIs, mobile applications, desktop and server applications, GraphQL-based platforms, ElectronJS-based applications, and cloud security. Doyensec also offers security automation services, including the development of security tools and software prototyping. Their expertise extends to blockchain technology and decentralized applications, focusing on Ethereum, Solana, and Algorand blockchains, with a standardized auditing methodology for smart contract code. The company dedicates 25% of its time to self-directed research and has developed widely-used open-source tools such as InQL, Electronegativity, and VMware’s Burp-Rest-API. They also created ElectroNG, a commercial scanner for ElectronJS. Doyensec supports remote work and flexible hours for employees, offering competitive salaries and results-based research rewards. The firm conducts detailed security audits of Electron-based applications and has presented findings at top-tier security conferences. For mobile application security assessments, they use a combination of static analysis, instrumentation, and dynamic testing. Doyensec has a proven track record of discovering vulnerabilities across hundreds of products and web frameworks. Their auditing process combines source code review with dynamic testing for effective and efficient results. They also offer cloud configuration reviews to identify misconfigurations and design issues in public and private cloud setups. Additionally, Doyensec specializes in reverse engineering, including binary analysis, protocol and file format reversing, and memory corruption debugging. They provide tailored security solutions for desktop and server applications across Linux, Windows, and macOS platforms. The company has also developed a Burpsuite plugin for detecting gadgets in server-side prototype pollution.