Skip to content

Know what an outsider could do to your company.

I investigate how an outsider could reach your customer data, accounts or production systems. I help your engineers fix confirmed risks, retest the changes and sign the evidence.

Request a place Free security level

For YC, Antler, Techstars and VC-backed companies, from seed to Series B.

Capacity

SM-N-001

After engagements with several Y Combinator-backed companies, I'm opening 3 additional places from November. Places go to companies that fit, in the order their requests arrive.

  • Taken
  • Open
  • Open

November: 2 of 3 places open.

A record you can put in front of a reviewer.

Your signed report records what I tested, what I found and what happened after the changes. Each finding has a dated status. Anything still open, or outside the testing, is stated.

There is a summary for the person reviewing your company’s security, with supporting evidence for your engineers.

Studio MajietExternal security auditA finding, its consequence and the evidence.
ILLUSTRATIVE · NO CLIENT DATA
Question
Could an account access another company’s records?
Evidence
A controlled test showed the access boundary failed.
After the change
The same test was repeated. Access was refused.
Limit
The result applies to the tested path and recorded scope.
Dated evidence · Scope and limitations
Signed, Mikaeel Majiet

From a question to a checked result.

We agree the systems, work, delivery dates and fee before the audit starts.

Fixed fee, agreed before we begin.

  1. 01

    Agree the question.

    We define the systems covered, your priorities and the permission for testing.

  2. 02

    Investigate the paths.

    I follow relevant findings, test the controls and explain the consequence of what is confirmed.

  3. 03

    Fix, then test again.

    You receive the evidence and an agreed plan. I help your engineers address the findings, then repeat the relevant tests to check the result.

Before you decide.

What will the audit cover?

The scope names the systems, allowed testing and assessment window. We agree any authenticated testing and engineering support before work begins. The report records what was tested and what remains unknown.

Will an auditor or customer accept the report?

The evidence can support a security review. Their requirements decide whether it is sufficient. Share any required test type or report format before we agree the work.

Who sees the work?

I never publish your name, findings or the fact that we worked together. You decide who receives your report. Confidentiality and handling of evidence are agreed before the assessment.

What about continuing coverage?

Continuing coverage can be discussed after an audit. Its scope, response times and fee are agreed separately.

Request a place.

A customer security review, a finding your team needs to resolve, or a system you have just shipped. We start with the question you need answered.

You work directly with me. Clients are never named.

Send your company domain and tell me what you need checked. If a customer review or audit has a deadline, include it.

I’ll reply with fit, scope, fee and available dates.

Prefer email? security@mikaeelmajiet.com

Your request is handled as described in the privacy notice.

Your request goes straight to me. I reply personally.

Free security level.

Start with an assessment of the agreed external checks. You receive a written summary of what was checked, the issues confirmed and what needs a closer look.

The result states its limits and any areas that remain untested. Anything putting customers at immediate risk is named with containment steps.

Request your Free security level

Send the request below. I’ll confirm your authority, the company systems and the assessment window with you, including a DNS record to verify control of the domain.

Carpet permission

Standing permission for non-destructive, reversible testing of the agreed company systems.

I confirm that I can authorise testing of the company systems listed in this request. I give Studio Majiet Carpet permission to audit, scan and penetration-test those systems using non-destructive, reversible methods, including following findings through to a bounded proof and checking whether the relevant controls hold.

Routine testing within the agreed assets and assessment window does not require my approval at every step. This permission excludes destructive or irreversible actions, service disruption, third-party systems and actions beyond my authority.

Studio Majiet will use controlled test data where possible, minimise sensitive evidence and record cleanup for reversible changes. Testing begins after my authority, the asset list and assessment window are confirmed. I can withdraw permission by emailing security@mikaeelmajiet.com.

SM-CP-2026-10-19

Read the method and permission terms and privacy notice.

This is a request for a scan. I’ll confirm your authority, the systems and the assessment window before testing.

November: 2 of 3 places open