brink.
attack surface

The full coverage matrix is being rebuilt.
For now, see the landing page.

The eight families we ship today (IDOR, auth bypass, SSRF, race conditions, stored XSS chains, business logic, secret exfil, token/session) are summarized on the home page. The deep dive — agents per family, success rate, sample exploits — lands when we publish the Q3 transparency report.

// expect: per-family agent breakdown, attempt → confirm funnel, sample exploits
We'd rather show you nothing than something that's wrong. If you came here looking for a specific answer, the fastest path is to email us — you'll get a human, usually within a day.