GMO Flatt Security Inc. @flatt_sec_en

Building AI that finds & fixes web security bugs — autonomously. SOTA in white-box bug hunting. Try Takumi: https://t.co/zruO7dgEcc flatt.tech/en Tokyo Joined May 2021

Tweets

59
Followers

630
Following

1
Likes

24

XSS Payloads @XssPayloads

2 months ago

Why XSS Persists in This Frameworks Era? an interesting analysis by @i_am_canalun flatt.tech/research/posts…

0 12 59 5K 37

GMO Flatt Security Inc. @flatt_sec_en

2 months ago

New blog out! Think XSS is a thing of the past with today's Web frameworks? Think again! Our new article by @i_am_canalun breaks down why this vulnerability persists and offers insights on how to stay secure. Read it here! flatt.tech/research/posts…

0 9 44 4K 24

RyotaK @ryotkak

5 months ago

However, the requirement for this vulnerability to be exploitable is unlikely, which fairly reduces its impact. If your Next.js application fetches a third-party website server-side, I recommend upgrading to the latest version! github.com/vercel/next.js…

0 2 10 2K 1

RyotaK @ryotkak

5 months ago

I recently reported a vulnerability to Next.js, which is a partial bypass of the middleware authentication bypass vulnerability (CVE-2025-29927) with Takumi (takumi-san.ai), an AI security engineer.

1 12 127 8K 38

YONEUCHI, Takashi @y0n3uchy

5 months ago

we'll start opening this up to more security folks soon—here's the waitlist: flatt.tech/en/takumi

0 2 7 431 0

YONEUCHI, Takashi @y0n3uchy

5 months ago

I know security folks (myself included) are tired of constant AI news, but recent model updates have genuinely impressed me. Our research team now actively uses AI—so much so that we've started crediting our AI agent, Takumi. Feels like a meaningful step. github.com/vim/vim/securi…