MarketNow got pentested. 4 CRITICAL, 5 HIGH, 7 MEDIUM. All fixed.
We launched MarketNow 2 weeks ago. Then we got pentested. This is the honest report of what we found, what we fixed, and what's still pending.
Why we did it
MarketNow handles real money — USDC payments on Base for AI agent skills. Before we promote it broadly, we wanted to know: is it actually secure?
We ran 4 parallel audits:
Security pentest — exploit-ready vulnerabilities
MarketNow got pentested. 4 CRITICAL, 5 HIGH, 7 MEDIUM findings. All fixed. Here's the full report.
Last week @rushabdev volunteered to peer-review two of the most sensitive parts of MarketNow: the...
The OWASP MCP Top 10 OWASP recently published their MCP Top 10 risks for 2026. At...
The pre-pentest audit in successive passes. How to verify findings before panicking, and how to select which probes become…
Real external security posture data from gov.uk, NHS, BBC, Stripe, GitHub — scanned with SecURL's passive analysis engine.
I build a security platform. Last night I stopped adding features and did something less fun and more...
