Skip to content

About HackIndex

HackIndex tests web apps, APIs and mobile apps for vulnerabilities, and reads source code through the eyes of an attacker. HackIndex is Joshua van der Poll. Joshua does the intake, tests and writes the report.

  • OSCP

    Certified by OffSec

  • 1

    Point of contact, from intake to retest

  • NDA

    Confidentiality agreed up front

From developer to tester

Joshua van der Poll comes from software development, with Laravel, WordPress and React Native. That is why a finding is not just about what is wrong, but also about how to fix it in your stack. A developer should be able to act on it straight away.

One point of contact

HackIndex works without account managers and without subcontractors. You email the person who tests, and questions about the scope or a finding are answered by whoever does the work. Your app, your code and your data are seen by nobody else.

Research and Ladon

Besides client work, HackIndex researches open-source packages, plugins and extensions for vulnerabilities and malware. The results are on Research, published only once users can protect themselves.

Ladon is the HackIndex product for vulnerabilities in WordPress.

Get your app tested.

Briefly describe what needs testing. You get a proposal with a fixed price.