Across two open-source research exercises, the BrutClad team used BrutClad to review 35 potential issues. The final internal reports retained five security findings: two rated High and three Medium under the assessed conditions. Twenty-eight candidates were ruled out, and two were recorded separately as informational observations.

  • 2 research exercises
  • 35 candidates reviewed
  • 5 security findings retained in the internal reports

Research into open-source collaboration software

The BrutClad team combined source-code review with controlled testing on local software builds. Of 22 candidates examined, the final internal report retained two security findings, both rated Medium. Nineteen candidates were ruled out and one was classified as an informational functional issue.

The work included repeatable local demonstrations, comparison of vulnerable and fixed behaviour where applicable, and review of evidence before preparing disclosure materials.

Research into an open-source AI application

The BrutClad team reviewed an open-source AI application using source analysis and controlled local testing. Of 13 candidates examined, the final internal report retained three security findings, rated two High and one Medium under the assessed conditions. Nine candidates were ruled out and one was retained as an informational design observation.

The research combined runtime observations with source verification and documented the evidence and limitations of each retained finding.

Related services: Offensive Security · AI Security · BrutClad.