Subscription service
gate: API authorization testing
Tests 6 kinds of authorization flaws with test accounts and delivers a report in Korean. Free during the current beta.
Checking by hand whether a web or app gives out other users' data used to be manual work. We're turning it into automated testing that swaps accounts, plus a report in Korean.
01What we build
One subscription service and one open lab
We charge for one thing, the testing service. Everything else, code and research, is public.
Open lab
Define404 Labs
7 MIT-licensed open source projects and 5 research reports, all public.
02How we work
Three things we stick to
The words on our site and in our reports follow the same rules.
01
We only publish measured numbers
We don't publish results we haven't measured. Benchmarks are released together with the test method.
02
We only test where we're allowed
No request is sent without ownership verification and a consent form.
03
We write it all in Korean
Flaw descriptions, reproduction steps, and fixes are written in natural Korean, not translated text.
03Company info
Company info and contact
Testing, partnerships, and security reports all go to the same email.
- Company name
- Define404 · Sole proprietorship
- CEO
- Hawon Kim
- Business registration no.
- 681-19-02677
- Business address
- 302-Ga2, 283 Ujeon-ro, Wansan-gu, Jeonju-si, Jeonbuk State, Republic of Korea
- john@define404.com
- KakaoTalk channel
- pf.kakao.com/_rYtmX
- Code
- github.com/johndefine404