مجموعة SecureBlock هي شبكة منتقاة من باحثي الأمن الهجومي المستقلين. إذا كنت الشخص الذي يجد الثغرة التي سيلخصها كاتب التقرير، وكنت تبحث عن مكان يدفع بإنصاف، ويُنسب الفضل مباشرةً، ولا يطلب منك أبداً كتابة عرض — تابع القراءة.
اختر تخصصاً واحداً وكن متميزاً فيه. نؤلف فرق الارتباطات وفق العمق، لا اتساع السيرة الذاتية.
Business-logic, authentication, and modern-framework exploitation. You know why the OWASP Top 10 is not the interesting part.
From Frida hooks to keychain forensics to backend API tracing — the whole app-plus-backend stack.
AWS, Azure, GCP. IAM graph analysis, Terraform review, cluster escape scenarios. You have opinions about IMDSv2.
Firmware unpacking, JTAG, bus sniffing, RF. The engagements where you actually take the screwdriver out.
هذا مقصود. المعيار الرفيع هو سبب ثقة عملائنا بالمجموعة.
Submit your profile, specialty, and a short "best find" writeup. Real writeups only — we read them.
Video call with two senior testers. Deep technical questions on your primary specialty, no whiteboard puzzles.
A realistic engagement scenario. You get a scope, a target, and a week. We evaluate the process, not just the findings.
Two references, ideally people who have shipped an engagement with you. We ask about how you work, not just what you found.
Sign the collective agreement, get platform access, shadow one engagement, then lead your first. You are in.
Transparent daily-rate tiers. Senior researchers earn $1,400 – $2,200/day. Tiers are published; the ladder is visible.
Match engagements to your specialty and calendar. Never assigned to work you did not opt into.
Every engagement has a SecureBlock full-time lead. You are not sold as a warm body to a client account manager.
Your callsign appears in the report. Clients know who found what. Portfolio grows with every engagement.
Access to a curated list of private VDP and bug-bounty targets that partner with SecureBlock.
You never write proposals, never sit in scoping calls, never hunt for logo work. Just the testing.
"The vetting was serious in a way I hadn't experienced before. The practical challenge was a real target, real business logic, and a real week to work through it. I felt more respected as a tester by the time I passed than by any full-time job I've held."
"I do this collective a couple weeks per quarter. The rest of the time I run my own research. SecureBlock treats me like a professional, pays on time, and never asks me to fill in a timesheet. I've stopped looking for anything else."
"The thing that sold me was that every engagement has a senior in-house lead. I know exactly who I'm reporting to, they know my work, and if I need backup on something novel there is always someone to page."
راسلنا إذا لم يكن سؤالك هنا — الرد يأتي من إنسان.
عشر دقائق للطلب الأولي. يرد إنسان خلال يوم عمل واحد في كلتا الحالتين.
