The rigor of an investigator, the independence of a lab.
Cybersecurity services, research & products, from Paris.
Featured paper: Time as a Key: Breaking Rhysida Ransomware
Featured post: How I broke Rhysida ransomware encryption
Europol
French Judicial Police
Quarkslab
Orange Cyberdefense
Digital Security
CEPOL
Certi-Trust
ECTEG
Senior security work.
Engagements deliver working code, reproducible findings, and writeups.
Forensics
Post-compromise forensics, root-cause analysis, and timeline reconstruction. Threat intelligence on the actors, infrastructure, and malware involved.
Reverse Engineering
Static and dynamic analysis of binaries, firmware, and proprietary protocols. Malware analysis and decryption tooling.
Vulnerability Research
Targeted auditing, fuzzing, and code review to find unknown flaws. Proof-of-concept and weaponized exploits, including modern mitigation bypasses on browsers, kernels, and embedded systems.
Training
Malware analysis, taught by the researcher who does it: a self-paced online course whose first section is free to watch, or five days in person with your team.
Public research.
Products.
Software products, built in-house alongside our services and research.
-
dotID
Identity registrar for Polkadot and Kusama
Registrar #5 on Polkadot and #7 on Kusama, both seats granted by on-chain governance. dotID verifies the identity fields an account has set on chain, records the judgement on the People Chain, issues .id usernames, and publishes a directory of every verified identity.
dotid.app -
WebDAV Manager
WebDAV client for iPhone and iPad
Browse, preview, upload and share the files on your own server, whether Nextcloud, a Synology NAS, Apache, IIS, rclone or dufs. First result for “WebDAV” on the US App Store, more than 23,000 downloads, no account needed, and the app collects nothing.
webdavman.com
A decade across Europol, the French Judicial Police, and industrial security R&D.
Sigreturn Labs is that experience, independent: the researcher you write to is the researcher who does the work.
Get in touch.
Engagements, partnerships, or press.
No sales team.
PGP: 9168 ABB2 CEBF 098D 10FE D19F FAC6 76D5 8BED 2687