Plumb
- Platform
- macOS · Apple silicon
- Status
- Status: In development
- Price
- One-time purchase, no subscriptionPersonal $39Lifetime $69Family $99
- Stack
- Swift · SwiftUI · APFS
- Today
- No download yet.
Security testing
Hands-on tests. Proof you can reproduce.
All security testingHow we workWhat happens after the first call.See the processBuild
We break software for a living. This is what we build.
All build servicesProof of workOur own apps, built the same way.See themA storage analyser for the Mac, an app checker for Android, and a desktop tool that traces where a picture has been. None of them is out yet.
Know what deleting really gives back.
Built for developers first. It sizes up caches, toolchains, app data and the build folders in your projects.
See what your apps can reach.
Checks your Android apps on the phone itself: which hold sensitive or special access, and whether any match published stalkerware indicators.
Where a picture has been, and how sure you are.
One picture goes to several public reverse image search engines, and every candidate it can fetch is measured on your own machine.
Client work gets the same rules.
What we build for clientsPlumb refuses anything it can’t classify. imgosint never logs in anywhere.
Plumb dry-runs before anything moves. Aegis removes apps only through Android. imgosint names every blocked engine.
imgosint keeps what it compared, named by SHA-256. Plumb shows a minimum, never a zero, when it can’t read a folder.
Plumb’s current source has no networking code. Aegis has no ad SDKs or scan analytics. imgosint has no account or telemetry.
Pick a product and leave your email. We’ll write when there’s something to try.
Joining costs nothingLeave the list any time
Web and API penetration testingWeb apps and APIs, tested by hand.
Smart contract auditsSolidity, read line by line and fuzzed.
Mobile and desktop app securityAndroid, iOS, macOS and Windows apps.
Network and cloud securityNetworks, plus AWS, GCP and Azure.
Firmware and IoT securityFirmware, device services, updates.
Open-source securityDependencies, pipelines, disclosure.