Author
Jean Cardonne
Founder, Kissaki
Founder of Kissaki, building agentic offensive security: autonomous agents that test code, containers, cloud, hosts, web and APIs and prove every finding with the evidence behind it.
Field notes
Broken authorization: BOLA and BFLA
BOLA and BFLA are the authorization flaws behind most API breaches. What they are, why scanners miss them, and how a working exploit proves each one.
Proof-driven vulnerability validation
Scanners list what might be wrong. Kissaki attaches a reproducible proof to every finding it can prove, or it says nothing.