Vulnerability research
Finding and analyzing security flaws in software, firmware, and network-exposed systems.
Independent security research
We find vulnerabilities and help get them fixed.
Tracewire Security is an independent cybersecurity research and consulting company. We research vulnerabilities in software, firmware, and network-exposed systems, assess the security of products and code, and coordinate disclosure with the vendors affected.
What we do
Security assessments and code review
Scoped reviews of products, systems, and source code, with findings you can act on.
Coordinated disclosure support
Helping researchers and vendors take a vulnerability from report to fix to publication.
Reporting and receiving security issues
When we find a vulnerability, we report it privately to the vendor and work to a default 90-day disclosure timeline. The full process is in our disclosure policy.
If you are a vendor responding to one of our reports, or you need to report a security issue to us, write to contact@tracewiresecurity.com.