ℹ️ This listing was auto-generated from Mastodon's public data. Doyensec hasn't claimed it, and it doesn't imply any partnership with or endorsement of SocialDB. Is this you? Claim it · Request removal (free).

Doyensec

Mastodon @doyensec@infosec.exchange

⚔ Compare ☆ Watch Own this channel?

🔄 Data last refreshed 2 days ago

🤝

Make a deal with Doyensec

🔒 Paid proposals held safely in escrow — released only when the work's approved.

Followers

148

Account age

3 yrs

🧰 Free analysis for Doyensec

🕵️ Fake follower check 📊 Engagement rate 💰 What they charge

Known for

Hey pentesters📢, make your lives easier by using maSSO - a weaponized SSO Identity Provider for security testing of OIDC & SAML 2.0 Service Providers.
The IdP your target trusts - that you fully control. Intercept, edit, re-sign. 👇 http://github.com/doyensec/maSSO
#doyensec #appsec #security

6 views Hey pentesters📢, make your lives easier by using maSSO - a weaponized SSO Identity Provider for security testing of OIDC & SAML 2.0 Service Providers. The IdP your target trusts - that you fully control. Intercept, edit, re-sign. 👇 http://github.com/doyensec/maSSO #doyensec #appsec #security

Hey pentesters 📢, maSSO just leveled up: Duo Mode & Signer Tab have landed.
Duo Mode: spin up two fully independent IdPs, manage from one dashboard. Does your target's SP actually keep "Org A" and "Org B" apart, or does a token from one slide right into the other? Now you can bring up the malicious IdPs in one command.
Signer Tab: craft, sign, and verify JWTs or SAML assertions on demand, no activ

2 views Hey pentesters 📢, maSSO just leveled up: Duo Mode & Signer Tab have landed. Duo Mode: spin up two fully independent IdPs, manage from one dashboard. Does your target's SP actually keep "Org A" and "Org B" apart, or does a token from one slide right into the other? Now you can bring up the malicious IdPs in one command. Signer Tab: craft, sign, and verify JWTs or SAML assertions on demand, no activ

New #CloudSecTidbits explores how misconfigured AWS ELBs can silently break security boundaries through rule shadowing, CloudFront/WAF bypasses, and alternate routing paths.
We’re also releasing ELBaph — a new read-only tool to map ELB routing graphs, detect exposed paths, and surface real-world attack chains across ALBs/NLBs.
https://blog.doyensec.com/2026/05/25/cloudsectidbits-elbaph-alb.html
#A

2 views New #CloudSecTidbits explores how misconfigured AWS ELBs can silently break security boundaries through rule shadowing, CloudFront/WAF bypasses, and alternate routing paths. We’re also releasing ELBaph — a new read-only tool to map ELB routing graphs, detect exposed paths, and surface real-world attack chains across ALBs/NLBs. https://blog.doyensec.com/2026/05/25/cloudsectidbits-elbaph-alb.html #A

We're excited to celebrate an important milestone for two of our teammates, Matei Buzdea and Luca Molteni, as they transition from interns to full-time security consultants! 🎉
From day one, they've demonstrated curiosity, technical skill, and a passion for application security. Throughout their internships, they've contributed to client engagements, collaborated with our team, and continued to gro

1 views We're excited to celebrate an important milestone for two of our teammates, Matei Buzdea and Luca Molteni, as they transition from interns to full-time security consultants! 🎉 From day one, they've demonstrated curiosity, technical skill, and a passion for application security. Throughout their internships, they've contributed to client engagements, collaborated with our team, and continued to gro

📊 Post engagement

Avg engagement / post

1.4%

Engagement vs followers

Nov 2022

On Mastodon since

🔥 Top post: Hey pentesters📢, make your lives easier by using maSSO - a weapo · 6 likes + reposts

📊 Activity & format

Posting cadence

1.5 / week

A lower-frequency account — each post lands with more weight.

Content mix

Mostly images

Recent: 4 text · 6 image · 2 video.

Follower / following

74×

Follows 2 back. A strong ratio — an audience that follows them, not a follow-for-follow network.

Recent posts

View on Mastodon ↗

▶ 🔥 Top post Hey pentesters📢, make your lives easier by using maSSO - a weaponized SSO Identity Provider for security testing of OIDC & SAML 2.0 Service Providers. The IdP your target trusts - that you fully control. Intercept, edit, re-sign. 👇 http://github.com/doyensec/maSSO #doyensec #app… ★ 6

▶ Hey pentesters 📢, maSSO just leveled up: Duo Mode & Signer Tab have landed. Duo Mode: spin up two fully independent IdPs, manage from one dashboard. Does your target's SP actually keep "Org A" and "Org B" apart, or does a token from one sl… ★ 2

We're excited to celebrate an important milestone for two of our teammates, Matei Buzdea and Luca Molteni, as they transition from interns to full-time security consultants! 🎉 From day one, they've demonstrated curiosity, technical skill, … ★ 1

The @doyensec team had an amazing time at our latest retreat in 🇵🇹 Porto Portugal 🇵🇹! The Festa de São João 🔨was a blast, along with kayaking, a vineyard tour and wine tasting, a vibe coding hackathon and getting to spend time with a great… ★ 1 After publishing our whitepaper (https://blog.doyensec.com/2026/05/27/aikido-xbow.html) comparing Aikido and XBOW, we evaluated our own AI-assisted testing workflow against one of the same targets to see whether it would identify the same … ★ 2

New from #Doyensec's Savio Sisco - 🚀 Session Switcher for #burpsuite makes manual auth testing faster - now easily save & swap cookies/headers Quickly test IDORs & authZ issues, plus session auto-update rules that track live browser sessio… ★ 1 Who needs a podcast? 🎧 🤯 Now you can watch 10+ hours of curated Doyensec presentations in our YouTube playlist: https://www.youtube.com/playlist?list=PLHZS7pNekfO2a-n--mocB9brlPGgZVy8h Get free access to great #security content, and if you… 🥳 If you missed it live, you can now watch our Szymon Drosdzol's presentation, API Productivity by Design: How Architecture Antipatterns Break Security and Your Sprint, from DevWorld on line. https://youtu.be/T5YlO5_u2U0?si=fGLU2LtI8h444NN…

🚨We've released a #security update for #safeurl addressing an #SSRF bypass in non-default configs, affecting those with IPv6 support enabled. A fix was released within ~12 hours of report. Upgrade to version 0.2.4: https://github.com/doyen… Proud to share that @doyensec was trusted by Anthropic as one of the security partners validating #Mythos findings as part of Project #Glasswing! Contact us today to see how our research-driven approach shapes the future of #appsec! https:… ★ 1

Just released - our latest whitepaper comparing the AI-powered penetration testing platforms from Aikido and XBOW in a head-to-head evaluation. We tested how each platform approaches automated security testing, compared detection capabilit…

New #CloudSecTidbits explores how misconfigured AWS ELBs can silently break security boundaries through rule shadowing, CloudFront/WAF bypasses, and alternate routing paths. We’re also releasing ELBaph — a new read-only tool to map ELB rou… ★ 2

🐘 Community & instance

Home server

infosec.exchange

A cybersecurity & infosec server — its members and audience skew toward that niche, so expect a community-aligned, engaged following.

On Mastodon since

Nov 2022

Joined in the Twitter-exodus wave of late 2022 — part of the migration that made Mastodon a real destination.

💡 Facts

🗓️Joined Mastodon in 2022 — 3 years ago.

👁️Averages 2 views per post.

📤Posts about 1.5× per week.

🕵️ Fake follower check

Estimated

80/100

Excellent Credibility score

97%

Real Real audience

Low Fake-follower risk

High Data confidence

Est. 97% real, active audience · Low fake-follower risk.
Strong engagement (~1.4% of followers engage each post) — an active, real audience.
Established account (3+ years old).

Heuristic estimate from engagement, follower ratios, account age & growth — a screening signal, not a guarantee.

💚 Brand affinity

Estimated

Brands Doyensec's audience is most likely to respond to — from detected sponsorships in this niche.

Anthropic

About

Doyensec works at the intersection of software development and offensive engineering. We discover vulnerabilities others cannot, and help mitigate the risk. https://doyensec.com