Independent security
Bypass Security investigates the seams between code, products, and people—then turns hard-to-find weaknesses into clear, actionable security work.
Bypass Security works where modern products are most exposed:
Focused assessment and research for teams building ambitious software. Every engagement is built around the product’s real trust boundaries, not a generic scan template.
Targeted review of web, desktop, and AI-enabled products using source analysis, runtime testing, and attack-path validation.
Deep, hypothesis-driven work on the edge cases where browsers, native bridges, identity, and application logic meet.
Review of agentic applications, model-facing data flows, tool orchestration, and the authorization boundaries around them.
The goal is not to make a scanner beep. It is to show exactly what breaks, why it matters, and what a durable fix looks like.
Map behavior, data flow, and trust before making assumptions.
Validate exploitability with bounded, reproducible evidence.
Connect technical root cause to business impact and remediation.
XSS Doctor is the research identity of Jonathan Dunn—and the public face of Bypass Security.
We bring a researcher’s curiosity and an engineer’s standard of evidence to complex application security. The work is independent, precise, and designed to help product teams make better decisions.
Have something difficult?