LauvasdataSecurity research
Vulnerability discovery, exploit analysis and adversarial validation, with coordinated disclosure and evidence you can act on.
Independent security and systems work
Systems built to hold up.
Security research, code analysis and practical architecture for teams that need clear evidence and working results.
Based in NorwayIndependent work operated from Norway, with privacy and careful evidence handling built into the engagement. This page sets no cookies and loads no third-party scripts.
What we do
Focused engagements from finding the weakness to making the correction hold in practice.
Code analysis
Manual review across languages: architecture boundaries, access-control correctness and dependency hygiene, plus the cleanup that makes a codebase easier to trust.
Solutions architecture
Identity and access, search and analytics, data pipelines and research infrastructure, designed around the actual environment and GDPR-aligned from the start.
How we work
Evidence first. Useful at the end.
Claims are checked against their sources, each finding is challenged before it ships, and delivery includes guidance on remediation. The goal is a system that stays understandable after the work is done.
Based in NorwayIndependent work, EU GDPR-aligned.
Adversarial reviewEach finding is challenged before it ships.
Working remediationRemediation guidance is part of delivery.
Research infrastructureTools connect evidence across domains.
For vendors
A direct route for coordinated disclosure, access requests and security communication.
Vendor portal
Request access to the secure vendor workspace for submissions, evidence and follow-up.
Security contact
Read the disclosure policy before sending sensitive material. Use the dedicated security mailbox for urgent reports.
Key and identity
PGP details and contact information are available when a report needs confidential handling.