Advanced Cybersecurity Solutions
Elite Penetration Testing & Security Research
Protecting Your Digital Assets Through Expert Bug Bounty Research & Offensive Security
100+
Penetration Testing Missions Completed
7+
Years of Security Experience
Critical
Vulnerabilities Discovered in Major Platforms
AWS
Cloud Security Specialist
About Poneglyph
Poneglyph is a specialized cybersecurity firm based in Morocco, we focus on offensive security, penetration testing, and advanced vulnerability research.
With a proven track record of successful bug bounty discoveries across major platforms including AWS,
GitHub, PyPI, and enterprise applications, our team brings deep technical expertise to every engagement.
Led by an experienced bug bounty hunter with over 100 penetration testing missions, we deliver
comprehensive security assessments that identify critical vulnerabilities before malicious actors do.
Our Security Services
Penetration Testing
Comprehensive security assessments of web applications, APIs, mobile apps, and network infrastructure. We identify and exploit vulnerabilities using real-world attack scenarios.
Cloud Security Audits
Specialized AWS security research and auditing. Expert analysis of IAM configurations, service-linked roles, VPC security, and cross-account vulnerabilities.
Advanced Security Research
Cutting-edge vulnerability research including supply chain attacks, OIDC federation issues, privilege escalation, and confused deputy problems.
Mobile Application Security
In-depth Android and iOS application security testing, reverse engineering, and comprehensive vulnerability assessment of mobile platforms.
Bug Bounty Programs
Professional bug bounty research with successful findings across AWS, GitHub Actions, PyPI, and major enterprise platforms. Proven track record of critical discoveries.
Security Consulting
Strategic security guidance, threat modeling, architecture reviews, and implementation of security best practices tailored to your organization.
Technical Expertise
☁️ Cloud Security
AWS, IAM, VPC, ElastiCache, MemoryDB, Bedrock
🌐 Web Application Security
XSS, CORS, CSRF, SQLi, Authentication Bypass
📱 Mobile Security
Android, iOS, Reverse Engineering, WebView
🔗 Supply Chain Security
Package Takeover, Dependency Confusion, npm/PyPI
🔐 Authentication & Authorization
OIDC, OAuth, SAML, IAM Policies
⚙️ Infrastructure Security
Container Security, CI/CD, CloudFormation
Secure Your Infrastructure Today
Partner with Poneglyph for professional cybersecurity services. We serve organizations
across Morocco and internationally with expert penetration testing and security research.
Ready to identify your security vulnerabilities?