Security

Security research at osicion.

osicion is a one-person software company building apps, APIs and websites. Security research is its third line of business, led by founder Luca Höhlein: finding vulnerabilities in widely used software and reporting them to the vendor through official bug bounty programs.

Responsible for security research

Luca Höhlein

Luca Höhlein

Founder · Security research · Würzburg, Germany

I founded osicion and I am responsible for all of its security research: choosing what to look at, doing the analysis, and reporting what I find to the affected vendor.

It started with reverse engineering Apple's wireless audio codecs, which led to my first vulnerability reports through the Apple Security Bounty program.

Because I build apps, APIs and websites myself, I look at software from both sides: how it is meant to work, and how it can be made to fail. From here, the research grows across more platforms, vendors and bug bounty programs.

How I work

Coordinated disclosure, without exceptions.

Own devices only
I test only on devices and accounts I own. No testing against other people's systems, services or data.
Vendor first
Every finding goes to the affected vendor through its official bug bounty or disclosure program, such as the Apple Security Bounty.
Nothing public while open
No details are published while an issue is unresolved, and findings are never sold or shared outside the vendor's process.

Contact

Questions about my research, or a vulnerability in an osicion product.

Security
security@osicion.com