@detectify

Scaling real-world hacker research with AI to help AppSec teams find and fix their most exploitable risks before attackers do.

 Stockholm and Boston
detectify.com
Joined November 2011
  • Tweets4.9K
  • Following1K
  • Followers11.2K
1.4KMedia
Back in 2021 I wrote a "how to hack APIs" blog for Detectify. It ended up being one of the most-read things I've written that year, but APIs have changed a lot since then: GraphQL, AI-generated endpoints, all of it. So I rewrote the whole thing for 2026. Check it out👇
2
42
216
9,539
Detectify launches Alfred to automate CVE security testing with AI ift.tt/5vPsWGn

Detectify launches Alfred to automate CVE security testing with AI - SiliconANGLE

Detectify launches Alfred to automate CVE security testing with AI - SiliconANGLE

siliconangle.com
1
4
469
CISOs' strategies for managing a growing attack surface - helpnetsecurity.com/2024/10/… - @detectify #Attack #CISO #Compliance #DigitalTransformation #Regulation #CyberSecurity #netsec #security #InfoSecurity #ITsecurity #CyberSecurityNews #SecurityNews
1
892
Detectify retweeted
Detectify@detectify14 Dec 2023
The overall most common vulnerabilities found across attack surfaces in 2023 were: 1. SSL/TLS hostname mismatch 2. Expired certificates 3. Path-based XSS 4. CVE-2021-40438 (Apache mod_proxy SSRF) 5. HTTPS/HTTP mixed content (see top vulns per industry in the report!) 3/5
1
2
5
1,005
4 fundamental questions on EASM — and how @Detectify’s solution answers them! What Internet-facing assets do I have? What vulnerabilities do I have? Where should I focus my attention? How do I fix existing vulnerabilities? Get the answers 👇 loom.ly/2cwu53w

4 fundamental questions on EASM — and how Detectify’s solution answers them

Let’s explore four big questions that are solved by having a comprehensive External Attack Surface Management (EASM) program in place.

blog.detectify.com
4
13
3,606
Why Vulnerability Management Needs A Patch In The Modern Tech Stack! #techstack #cybersecurity #CVSS @detectify #rickardcarlsson spiceworks.com/it-security/a…

Why Vulnerability Management Needs A Patch In The Modern Tech Stack - Spiceworks

Rickard Carlsson of Detectify takes a closer look at vulnerability management and shares why it’s not adequately equipped for modern DevOps and how it can be better adapted to the expanding tech...

spiceworks.com
1
1
2
1,178
A hacker's guide to SSRF vulnerabilities and where to find them! In this @Detectify blog, @hakluke outlines: 🚀 What the vulnerability is 🚀 The places that they are found 🚀 How you can bypass SSRF protections labs.detectify.com/2022/09/2…
2
27
92
6,499
One of the most difficult parts of bug bounty hunting is picking a target... This article from @G0LDEN_infosec on the @detectify blog provides some good advice and tips for doing just that 🙂 labs.detectify.com/2022/12/0…
2
34
2
91
OWASP 2022 Global AppSec San Francisco @detectify - Silver Exhibitor
1
1
13
Detectify retweeted
SC Media@SCMagazine17 Nov 2022
.@detectify reported that 35% of the vulnerabilities reviewed by its private network of ethical hackers did not have a CVE assigned. #cybersecurity #infosec #ITsecurity bit.ly/3TQAITU
4
7
LIVE on #TechstrongTV: @detectify’s Rickard Carlsson discusses the latest in the company and talks about the #shiftleft movement. Watch now: bit.ly/3flLaVi
2
1
2
The whitest of white hats: @Kyle_L_Wiggers reports that @detectify secures an additional $10 million more to expand its ethical hacking platform. techcrunch.com/2022/09/29/de…

Detectify secures $10M more to expand its ethical hacking platform | TechCrunch

Detectify, a startup that leverages a community of ethical hackers to identify vulnerabilities in corporate platforms, has raised $10 million.

techcrunch.com
2
1
3
Account hijacking using “dirty dancing” in sign-in OAuth-flows (3rdparty javascript-inclusions having multiple vuln scenarios where authorization codes or tokens could leak to an attacker) : labs.detectify.com/2022/07/0… credits @fransrosen
13
22
Detectify security researcher @fransrosen discovered how to perform single-click account hijacking by abusing the OAuth process flow portswigger.net/daily-swig/d…

PortSwigger — Web security tools, training and research

We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.

portswigger.net
2
5
Detectify retweeted
VivaTech
@VivaTech16 Jun 2022
Hacking isn't all that bad 🤫 Ethical hacking pioneer, Rickard Carlsson, CEO @detectify, takes the concept further than most at #VivaTech as we dive into digital identities.
3
10
Join our team and work with the bug bounty community at Detectify: detectify.com/career/stockho… Remote or on-location in Stockholm/Boston ♥️
1
5
53
Dublin Tech Summit is thrilled to have @ericsson, @detectify, @InvestNI, @ActiveFence, @SkillnetIreland, @KaseyaCorp, @GemservIreland, @livetiles and @Avanade as our partners for #DTS22.
3
9
18
"Look for the weird, not necessarily the bad" a great quote from @MagisterQuis #HackYourself Stockholm @detectify. Great to meet all friends in person again
1
2
7
At SPACE with the @detectify fam to talk about cool stuff at the GO HACK YOURSELF event! Doors open at 15:30
3
4
75
Detectify retweeted
GOTO@GOTOcon10 May 2022
We can all agree that the current events of COVID-19 and the conflict in Europe have raised the stakes for cyber attacks... Jørn Larsen talks with Rickard Carlsson about trends in #cybersecurity and what is @detectify's approach to fighting cybercrimes 🕵️ youtu.be/g5KpkF8nMgY?list=PL…
1
1
2
Load more