Patchhound is a one-hound security studio. Every fix we ship goes through a five-level verification gate and gets written up in the hunt log below: bug, diff, test numbers, mistakes included. Businesses hire us for the same treatment at a flat fee.
An idempotency race with a merged fix still had two real gaps: a lost-race error surfacing as a raw 500, and responses outliving their claims. Reading acceptance criteria against shipped code pays.
A "$780 bounty program" with no way to get paid and README instructions written at AI agents. How we spotted it in thirty seconds, plus the one-line fix for the real bug inside.
Most security work asks you to trust a logo. We'd rather show you the receipts: every claim on this site traces to a public diff, a test run you can repeat, or a live request against a real server.
If your site takes form submissions, logs people in, or touches a database, it has the same class of bug we find in open source every week. The tune-up is how you find out before someone else does.
Maintaining an open source project? A free security pass from us costs you nothing but an email. We publish what we find only with your sign-off. hello@patchhound.dev.
RSS: /feed.xml · GitHub: iamwhitehat