Pro+
Web Ranges
A full engagement against an entire company: multiple services, multiple flags, one chained path from foothold to impact.
HookLink
HookLink
HookLink is a Miami dating app running a full multi-service stack: a marketing site, the dating app and its API, a photo service, a subscriptions service, and an internal Trust & Safety console. Seven flags, one engagement, start as an anonymous visitor and end holding 180,000 people's most sensitive data.
NoshRun
NoshRun
NoshRun is an Austin food-delivery startup running a full multi-service stack: a marketing site, a customer ordering app, a restaurant partner dashboard, a driver portal, an API, a promotions engine, and an internal operations panel. Seven flags, one engagement, start as an anonymous customer and end with the keys to the whole platform.
Murmur Inc.
Murmur
A 14-million-account microblogging platform with a Series-B-startup attack surface. Eight attack phases, ten flags, full platform compromise.
Summit Property Group
Bedrock
Summit Property Group is a Denver-based property-management firm running a multi-service web stack: a public marketing site, a tenant portal, an applicant-intake form, an owners' dashboard with PDF generation, an internal staff admin panel, and a Metabase analytics deployment. Find every flag without insider access.