Do you use or exploit WebSockets? Check out our new blog post to see how modern browsers may (or may not) be protecting you from Cross-Site WebSocket Hijacking!
Simply stated: Give us any kind of app and we'll hack it better than the rest.
Our clients include awesome tech companies in Silicon Valley, NYC, and beyond.
- Thank you to @IncludeSecurity for sponsoring the lanyards at BSidesSF 2025! bsidessf.org/sponsors #bsidessf #BSidesSF2025 #infosec
- Today our team at IncludeSec is releasing a site to help with key collision concerns. We've known for a while that private keys should not be shared, use this site to ensure they are not! ismyprivatekeypublic.com
- New research🤩 on old tech👴! Our team's latest blog post demonstrates many ways memory vulnerabilities can occur in your legacy Delphi code despite being described as a "memory safe" language by the NSA.
- It's winter, so hacking space heater IoT devices to completely control their firmware seems like the thing to do! In our latest blog post, you'll see some of the things we do for our IoT/HW clients!!


