01 / ResearchFounder
zack0x01
Independent security research into web applications, APIs, and the weaknesses between them.
Explore my researchIndependent security researcher & founder
ZACK0X01
See beyond the interface.
Companies I hacked
Public acknowledgments for responsible security research.
19 publicly credited programs
Behind the handle
A human behind
the handle.
Zack / zack0x01
Security researcher & founder
I’m Zack. I investigate the assumptions that connect people, software, and security.
My work focuses on web applications, APIs, authentication, and authorization. I also explore AI-powered systems: how they behave, where their boundaries fail, and how to test them responsibly.
I combine manual investigation with automation, keeping human judgment at the center. Through zack0x01, sectiv.ai, and hackerz.space, I bring that curiosity into security research, continuous testing, and hacking education.
Explore my HackerOne profile01
Web & API security
Applications, endpoints, and business logic.
02
Authentication & access
Identity, permissions, and account security.
03
AI-powered systems
Agents, models, and their security boundaries.
04
Security automation
Repeatable workflows with human judgment.
Founded by Zack
One curiosity.
Three ventures.
Researching the problems.
Building what comes next.
02 / BuildFounder
sectiv.ai
AI-powered security testing. Expert-led setup and monitoring, with human expertise behind the findings.
Discover Sectiv03 / ShareFounder
hackerz.space
A hacking education platform. Learn the methods and develop the thinking behind the tools.
Explore the platformSelected work
Ideas, made tangible.
Tool / JavaScript analysis
JS-Analyser
A Python tool for reviewing JavaScript: exposed secrets, API endpoints, and patterns worth investigating.
Extension / AI security review
Sectiv for Burp Suite
Bring AI-assisted review to captured Burp traffic, with focused skills, structured findings, and report exports.
Platform / Reconnaissance
Recox
A reconnaissance tool for subdomain enumeration and exploring an application’s attack surface.
Tool / Vulnerability research
React CVE scanner
A command-line tool for investigating CVE-2025-55182 in React Server Components and Next.js applications.
Watch & learn
Tutorials.
17 minBuild your own AI hacking agent
A walkthrough of an AI hacking workflow using Abacus AI, Burp Suite, and MCP.
30 minBuild a Hermes hacking agent with custom skills
Set up Hermes for security research and bring custom skills into an AI-assisted hacking workflow.
24 minAccount takeover, step by step
An account takeover tutorial for understanding authentication weaknesses through a bug bounty perspective.
Start a conversation
Let’s look
closer.
Security work, research, or something worth building together.