Backstage
How things actually work under the hood. Technical deep-dives into the systems we built, the decisions we made, and the components we rely on.
Implemented
2026-03-31
JA3/JA4+ TLS Fingerprinting — Identifying What’s Behind the Connection
User-Agent lies, TLS doesn’t. How we use JA3 and FoxIO’s JA4+ suite to identify applications, libraries, and malware from their TLS handshakes — with a 276K fingerprint database. Plus: licensing implications for open-source projects.
Methodology
2026
Autonomous Fuzzing — How We Find Bugs Before Attackers Do
LLM-augmented fuzzing combining AFL++ coverage guidance with AI-generated seeds. Two-stage approach: fast mutation + ASAN verification.