# About HackIndex

HackIndex tests web apps, APIs and mobile apps for vulnerabilities, and reads source code through the eyes of an attacker. HackIndex is Joshua van der Poll. Joshua does the intake, tests and writes the report.

- **OSCP**: Certified by OffSec
- **1**: Point of contact, from intake to retest
- **NDA**: Confidentiality agreed up front

## From developer to tester

Joshua van der Poll comes from software development, with Laravel, WordPress and React Native. That is why a finding is not just about what is wrong, but also about how to fix it in your stack. A developer should be able to act on it straight away.

## One point of contact

HackIndex works without account managers and without subcontractors. You email the person who tests, and questions about the scope or a finding are answered by whoever does the work. Your app, your code and your data are seen by nobody else.

## Research and Ladon

Besides client work, HackIndex researches open-source packages, plugins and extensions for vulnerabilities and malware. The results are on [Research](https://hackindex.nl/en/research), published only once users can protect themselves.

[Ladon](https://ladon.hackindex.io) is the HackIndex product for vulnerabilities in WordPress.

## Company details

- **Name**: HackIndex
- **Email**: info@hackindex.nl
- **PGP**: D159 E7A0 2E22 B3D1 9319 4BE4 49E4 749C A2F9 69C8

## Get your app tested.

Briefly describe what needs testing. You get a proposal with a fixed price.

- [Request a pentest](https://hackindex.nl/en/contact)

## Glossary

- **Retest**: Once the issues are fixed, every finding is tested again to confirm the fix works.

Source: https://hackindex.nl/en/about