Project A
Self-hosted web application
Synt reproduced unsafe handling of user-supplied file names in download headers.
Research
Security findings, open to inspection.
Explore what Synt found in real open-source projects and training applications. Inspect the evidence, the limits and the external research that informs our work.
Evidence could not be loaded.
The presentation data could not be validated. No results are inferred.
Synt / Open-source review
Six projects. Code and dependencies.
Explore the types of projects, the code findings Synt reproduced and the dependency risks.
16 vulnerabilities reproduced locally. Fixes and regression checks verified.
197 Matches in the vulnerability database · 16 Vulnerabilities found directly in project code · 6 Open-source projects
Projects are anonymised until coordinated disclosure is complete. The full report is available on request.
Project B
API proxy service
Input handling and protection of sensitive data.
Project C
Web framework
Synt reproduced an unhandled error in a request input path.
Project D
Self-hosted AI application
Access control and protection of sensitive configuration data.
Project E
AI agent tool
Outbound request validation.
Project F
Web framework
Trust boundaries, transport security and request handling.
Synt / Application tests
Completed application reports.
Account access, injection and business logic across training applications. Explore the completed reports.
Loading completed reports…
Report counts retain their original units. Independent review is pending; these counts are not a verified vulnerability total.
External research
Capability in context.
Published evaluations of base models and agent swarms. These are external results, not measurements of Synt.
External system results with different setups. Synt measurements on these suites are pending.
Loading benchmark results…
Pay for validated findings.
Your finding fees have an agreed maximum. Findings above it remain in your report at no additional charge. No confirmed vulnerabilities means no finding fees.
See pricing and capsDiscuss your scope
For a closer look, request the English or Serbian presentation. We can discuss the scope and evidence together.
Evidence and scope
Six completed projects from a 15-project batch. Results concern tested snapshots; upstream acceptance and new CVE assignments are not claimed.
Matches to known dependency advisories. Applicability and deployment conditions are documented in the full report.
Application report counts use different units and must not be added to the OSS total. External benchmarks retain their own tasks, budgets and attribution.
Read the research summary