null@security:~$./identify

Null Pointer Security

Security research: Breaking chains, Securing code.

Expert security consultancy specializing in web application penetration testing and smart contract auditing. We find vulnerabilities before the bad actors do.

View ServicesContact Us
scroll
~/services $ls -la

Security Services

web_pentest.sh
$ ./pentest --target web_app --shift left

Web AppSec & Penetration Testing

Application security from code review to penetration testing.

$ cat features.txt
  • -OWASP Top 10 & API security testing
  • -Secure code review & SAST integration
  • -CI/CD security pipeline setup
  • -Threat modeling & architecture review
  • -Developer security training
smart_contract.sh
$ ./audit --chain evm,solana --shift left

Web3 AppSec & Contract Auditing

Security review of smart contracts with DevSecOps integration.

$ cat features.txt
  • -Solidity, Rust, and Go audits
  • -DeFi protocol security analysis
  • -CI/CD security for dApp deployments
  • -Web3 threat modeling workshops
  • -Developer security training
ml_security.sh
$ ./ml --mode threat_intel --model custom

ML/AI Security Engineering

ML/AI solutions for vulnerability detection and threat intelligence.

$ cat features.txt
  • -Threat detection models
  • -Vulnerability pattern recognition
  • -Threat intelligence feeds
  • -Adversarial ML attack defense
  • -Model development & training
~/process $./engagement --steps

Our Process

[01]

Discovery

$ ./init --scope

Define scope, threat model, and engagement rules.

[02]

Assessment

$ ./scan --exploit

Active testing and vulnerability verification.

[03]

Reporting

$ ./report --severity

Detailed findings with remediation guidance.

[04]

Verification

$ ./verify --retest

Confirm fixes and provide final sign-off.

~/why-us $cat README.md

Why Us

## Our Background

Founded by security researchers with 15+ years of experience breaking and building systems. We've published CVEs for Ruby on Rails, Java applications, and the Linux kernel.

Our expertise spans traditional web security and Web3. Since 2022, we've integrated ML/AI for advanced threat detection, giving clients an edge against emerging attack vectors.

Deep understanding of how systems are built gives us an edge when breaking them. We think like developers because we are developers.

15+
years_experience
CVEs
published
Web3
security_focus
ML
threat_detection
expertise.sh
$ls -la expertise/
drwxr-xr-xweb_security/
drwxr-xr-xsmart_contracts/
drwxr-xr-xdefi_protocols/
drwxr-xr-xsolidity/
drwxr-xr-xrust/
drwxr-xr-xgolang/
drwxr-xr-xapi_security/
drwxr-xr-xml_detection/
$cat track_record.log

[CVE] Ruby on Rails

[CVE] Java Applications

[CVE] Linux Kernel

$
~/contact $./connect.sh

Get in Touch

contact.sh
$cat message.txt

Need a security assessment for your web
application or smart contracts? Let's discuss
how we can help protect your code and users.

$echo $EMAIL
contact@nullpointersecurity.com
$cat links.txt
->linkedin.com/company/nullpointersecurity
$./request_assessment.sh
> request_assessment
$