MICHAELIS LABS
INDEPENDENT OFFENSIVE SECURITY STUDIO
We get curious about the things attackers get curious about. Then turn what we find into security that holds up.
Human-led testing. Clear findings. Practical fixes.
Active Directory ✳ Hardening ✳ AI & agents ✳ Android ✳ iOS
01 / THE ATTACK SURFACE
Five specialisms.
A scope built around you.
How far could one compromised account go? We follow identity and network attack paths through your Windows and Linux estate.
We examine directory permissions, credential exposure, trust relationships, privilege escalation, and access between systems within the agreed scope.
You receive: evidenced attack paths, affected assets, and a prioritized remediation plan.
Discuss your networkYour model is only part of the system. We test the prompts, tools, data, and permissions that turn an answer into an action.
We assess direct and indirect prompt injection, sensitive data exposure, insecure output handling, and trust boundaries across connected tools and agents.
You receive: reproducible failure cases and practical changes to application controls and tool permissions.
Discuss your AI systemConfiguration review and practical hardening for Windows and Linux: service exposure, privileges, baseline settings, and logging. Recommendations are prioritized around your environment and operational needs.
Deliverable: a baseline review, remediation guidance, and a validation plan for agreed changes.
Scope hardeningStatic and runtime assessment of your Android application, including local storage, exported components, authentication, network behavior, and backend access exposed through the app.
Deliverable: reproducible findings, impact evidence, and fixes your mobile team can act on.
Scope Android testingAssessment of your iOS application’s runtime behavior, Keychain and local storage, authentication, platform integrations, and communication with its backend. Testing depth depends on the build and device access agreed during scoping.
Deliverable: validated findings with platform-specific remediation guidance.
Scope iOS testing02 / FROM CURIOSITY TO CLARITY
[ HUMAN IN THE LOOP ]Good security work leaves your team with a clearer picture of the risk—and a sensible next move.
We start with your environment, your goals, and the boundaries of the assessment. You know what will be tested.
Hands-on investigation connects individual weaknesses to meaningful impact, with evidence you can follow.
A clear report explains what happened, why it matters, and what to fix first. Retest needs are agreed in the scope.
Clarity is part of the deliverable. Technical evidence for engineers. An understandable risk story for everyone else.
EVIDENCE → ACTION03 / NOTES FROM THE LAB
CURATED, NOT CROWDED.Useful setup notes, security lessons,
and tools we’ve worked on.
A practical DigitalOcean setup guide covering DNS delegation, TLS certificates, the full configuration, systemd, polling, and renewal.
Read the note ↗A small Caido plugin for trimming out-of-scope history and sitemap noise, with a habit that keeps cleanup reviewable.
Read the note ↗04 / YOUR MOVE
Tell us what you’re building, protecting, or worried about. We’ll work out the right assessment together.
contact@michaelislabs.comBASED IN MAURITIUS / BUILT FOR YOUR ENVIRONMENT