Skip to content

About

Findings

Hacktron gives you the offensive security capability to find and fix exploitable vulnerabilities before attackers do.

Two bugs chained into the ChatGPT and Codex accounts of OpenAI employees in under 72 hours, shown with a harmless pull request. The Washington Post
A pre-auth remote code execution bug (CVSS 9.9) in BeyondTrust Remote Support and PRA. Attackers were exploiting it within four days of disclosure. Google Threat Intelligence Group
A shell injection in GNU’s code forge led to root, and the access could have let an attacker push to Bash’s upstream repository. The FSF fixed 26 vulnerabilities. iTnews
Claude Opus built a working Chrome V8 exploit chain against the Chrome 138 bundled in Discord for about $2,283 in API fees. The Register
A sign-in bypass in Palo Alto’s GlobalProtect VPN that needs only a username. Palo Alto rated it High (7.2). Palo Alto Networks advisory
Five WAF bypasses in Vercel’s React2Shell challenge earned $170k. Vercel

Talks

“We’ve spent our careers hacking Fortune 500 and governments.”

Team

Hacktron is a small team of hackers. We build the agents to do the work we did by hand: find the bugs that matter and prove they can be exploited.

Hiring

If you like hard problems in security and software engineering, we’d love to hear from you.

Contact

Book a demo or start for free.