Scenario : DeployWare is a GitOps platform that lets teams connect repositories and automate deployments. The Repo Import feature lets users submit a git URL for DeployWare to clone and analyse. T...

Scenario : Quoted is a four-person team out of Edinburgh who built the tool they wished existed: a calm, opinionated home for the sentences you underline on your Kindle, save in Pocket, or pull ou...

Scenario : Folio Coffee Co is a small direct-trade roaster in Asheville. Their subscription is built around the printed card that ships in each bag — a personalized note with the lot name, ship da...

Scenario : Statuscraft is a two-engineer side project out of Berlin, founded in 2022 as a hobbyist alternative to Statuspage — drop in a URL, get a status page, pipe outages to Slack. Hobby tier i...

Scenario : Yardlines built their storefront on a long weekend in 2022. The category filter on the shop page was the kind of throwaway code you write at 2am with a deadline tomorrow — quick, direct...

Scenario : Exfil Analytics processes thousands of reports daily. Their submission pipeline accepts uploads and confirms receipt, but never reveals what happens inside. You’ll need to find another ...

Scenario : Fieldnote is a journaling app for field biologists. Colleagues paste links to related papers or references and share them via a /share?u= URL. The filter is one line — if the URL doesn’...

Scenario : After a previous incident, Toxin Labs hardened their internal file viewer with input filters and request inspection. They’re confident it’s locked down. Prove them wrong. Solution : ...

Solution : Millrace is a microbrewery and taproom that hosts live music. Their homepage has a tiny debug pane echoing the visitor’s user-agent into an HTML comment for troubleshooting. The /debug ...

Scenario : ScanPortal is an attack surface management platform for SMBs. The developer recently hardened the nmap call after a code review flagged it. What they missed is that every submitted targ...