Reproducible evidence
We document test conditions, requests and responses so that the development team can reproduce vulnerabilities.
06 / THE COMPANYFELSEN SECURITY ↗
Understanding the technology,
assessing its security.
FELSEN Security assesses the security of web, API and AI services, drawing on development and security experience gained in Germany.
OUR APPROACH
Thorough assessment
provides the basis for informed decisions.
From discovery to remediation
We provide development teams with reproduction steps, evidence and remediation guidance. For management, we explain business impact and remediation priorities.
We assess the service by understanding its architecture and business workflows, and discuss remediation with the development team. Retesting after remediation is included where agreed within the scope.
FELSEN's assessment approachPriorities based on impact
We analyse the extent of information disclosure, attack prerequisites and business impact to recommend remediation priorities.
Retesting after remediation
We repeat the reproduction steps for agreed findings to verify remediation and also check that legitimate functionality continues to work.
TECHNICAL FOUNDATIONPractical experience
Practical experience
in development and security
Technical lead · Mingi Hong
- OFFENSIVE SECURITY
- OSCP certifiedCertification held by the technical lead · 2023
- VULNERABILITY RESEARCH
- Discovery and disclosure of CVE-2025-45055Stored XSS and escalation to administrator privileges through SVG attachments in Silverpeas 6.4.2
- COMPUTER SCIENCE
- Computer Science graduate, TU BerlinResearch into OpenAPI-based BOLA / IDOR analysis
- ENGINEERING & RESEARCH
- Software development · Penetration testing · Security automationWeb & API, AI & LLM, vulnerability research and remediation retesting
- COMMUNICATION
- Korean · German · EnglishConsultation in Korean · Collaboration in German and English
RECOMMENDATIONS
Client and developer feedback
Feedback from clients and developers
who have worked with technical lead Mingi Hong.
Translated excerpt
He identified vulnerabilities precisely and verified them with clear proofs of concept. …excerpt omitted… He also demonstrated a strong sense of responsibility during follow-up assessments and retesting, working to deliver tangible improvements to the client's security.
…excerpt omitted… He documented the findings clearly so that both the client and the development team could understand them. In discussions about how to communicate the results, he valued not only technical accuracy but also accessible explanations, a structured presentation and practical usefulness.
View German originalHide German original
Er identifizierte sicherheitsrelevante Schwachstellen mit hoher Präzision und validierte diese anhand nachvollziehbarer Proofs of Concept. […] Auch bei Folgeaktivitäten und Retests hat er Verantwortung übernommen und erkennbar mit dem Ziel gearbeitet, tatsächliche Sicherheitsverbesserungen beim Kunden zu erreichen.
[…] Sehr positiv ist mir außerdem seine Fähigkeit aufgefallen, technische Ergebnisse in eine klare und für Auftraggeber wie Entwicklungsteams nachvollziehbare Form zu bringen. In unseren Gesprächen zur Aufbereitung der Ergebnisse zeigte Herr Hong den Anspruch, nicht nur technisch korrekt, sondern auch verständlich, sauber strukturiert und praxisnah zu berichten.
Excerpt from a written recommendation · Frank Hartmann · 2026.03.11
Translation
Mingi Hong contributes to Silverpeas through security research and penetration testing. His vulnerability reports are detailed and well structured, making it easy to understand the significance of an issue and reproduce the attack.
He goes beyond using tools to identify vulnerabilities: he understands how the application and its features work and analyses how far an attack could extend. He also recommends how to remediate the vulnerabilities he finds.
View English originalHide English original
Mingi Hong is a contributor in Silverpeas as a security researcher and penetration tester. His reports about vulnerabilities are very well documented and also well detailed so that it's easy to understand the importance of the vulnerability and to reproduce the attack.
He don't just use tools for testing and discovering some vulnerabilities, he also try to understand the processes in action in the tested application/functionality to go further in the vuln exploit. Beside that, he also proposes the possible fixes of the discovered vulnerabilities.
LinkedIn recommendation · Miguel Moquillon · 2025.03.31
FELSEN: the meaning of solidity
Felsen is the German word for rock or bedrock. Our aim is security that provides a stable foundation for your services.
Contact