CYBERSHIELD RESEARCH

Research with purpose.
Security with impact.

We specialize in delivering cutting-edge research solutions tailored to each client’s mission.

Explore focus areas Submit research

FOCUS AREAS

Our Research Focus

Deep investigation across mobile platforms, messaging and the web. Four areas connected by a rigorous approach to security.

01

iOS

Research into iOS applications, platform isolation and the boundaries between user space and the kernel.

02

Android

Analysis of Android applications, system components and the protections separating apps, privileged services and the kernel.

03

Zero Click

Investigation of messaging, media and automatically processed content that can expose systems without user interaction.

04

Browser

Research into browser engines, web content processing and sandbox boundaries across modern browsers.

GUIDING EVERY ENGAGEMENT

Our Research Principles

A clear purpose. Trusted relationships. Research with responsibility.

01

Accountable by Design

Every engagement has a defined purpose, agreed authorisation and clear boundaries. Applicable laws, confidentiality and human rights guide how we scope research and handle, share and use findings.

02

Partnerships Built on Trust

We review each client’s mission, governance and intended use. Transparent relationships and clear responsibilities help our research support legitimate security objectives and responsible use.

03

Progress Through Collaboration

We work with clients, specialist partners and independent researchers to share knowledge responsibly, strengthen safeguards and advance accountable cybersecurity research.

04

Security That Protects People

We focus on research that strengthens security and protects people. We assess technical findings alongside their potential impact, with proportionate safeguards from discovery to practical application.

DEEP EXPERTISE. SHARED PURPOSE.

Our Research Team

Experienced researchers lead every investigation and validate the evidence.

Our specialist team brings expertise in mobile and browser security, reverse engineering and vulnerability analysis. We combine researcher judgement with advanced tooling and controlled environments, shaping each investigation around the client’s mission.

How we work

01

Define the mission

Agree the research question, target systems, scope and boundaries before work begins.

02

Investigate and validate

Combine specialist analysis, AI-assisted tooling and controlled testing to examine behaviour, reproduce findings and assess impact.

03

Share clear evidence

Explain what we found, why it matters and its limitations, with root-cause analysis and practical next steps.

Our Corellium partnership supports controlled mobile testing, debugging and reproducible research.

Explore our Corellium partnership

FOR INDEPENDENT RESEARCHERS

Vulnerability
Acquisition Program

If you are an independent researcher, you can build a trusted, long-term relationship with Cybershield Partners.

We welcome vulnerabilities and proofs of concept across iOS, Android and applications, including the areas below.

SUBMIT RESEARCH OR EXPLORE A COLLABORATION

Send a brief description of the vulnerability to [email protected], encrypted with our GPG public key.

Download our GPG key

01 / RESEARCH FOCUS

iOS Platform

  • App/WebContent sandbox-to-root LPE
  • Kernel read primitive
  • Kernel write primitive
  • PAC bypass
  • PPL bypass
  • SPTM/TXM bypass

02 / RESEARCH FOCUS

Android Platform

  • App/WebView sandbox-to-root LPE
  • Kernel read primitive
  • Kernel write primitive
  • SELinux bypass
  • CFI bypass
  • MTE bypass
  • TEE/TrustZone privilege escalation
  • pKVM/hypervisor isolation bypass

03 / RESEARCH FOCUS

Applications

  • WhatsApp or Signal RCE (iOS/Android)
  • WhatsApp or Signal fingerprinting techniques (iOS/Android)
  • Telegram RCE (iOS/Android)