PoC Builder.
From finding to filed in minutes. Adversarially validated. Severity calibrated. Built by the same kill-loop methodology behind our own CVE work.
Finding the bug is the easy part. Turning it into a PoC that survives platform triage on the first read is the part that eats your evenings.
Triage is the bottleneck. A real vulnerability, written up by a tired hunter at 2 AM, gets read by an analyst at 9 the next morning and closed for missing reproduction steps, unclear severity, or insufficient evidence. The hunter loses the bounty, the program loses the bug, and the next attacker finds it later for free.
PoC Builder is the kill-loop between confirmed finding and submission-ready evidence. You bring the discovery. We run it through the same adversarial pipeline we use on our own CVE work. What comes back is a reproduction, an exploitation chain, a CVSS score with calibration notes, and a writeup shaped for the platform you are filing to.
You ship the bug. You keep the bounty. We bill for the methodology.
The Gauntlet.
Six phases. Adversarial throughout. No PoC ships until it has survived every pass. The readout below is a single submission moving through the pipeline in real time.
Tiers and Credits.
Pay for what you ship. Credits scale with severity. Subscriptions roll over up to 2x. One-time top-ups available for non-subscribers.
- Queue24 hour SLA
- OutputTriage verdict only
- Use caseSample the methodology
- SeatsSingle researcher
- Queue1 hour SLA
- OutputAll severities
- Use caseActive solo hunter
- SeatsSingle researcher
- Queue15 minute SLA
- OutputAll severities + chains
- Use caseFull-time hunter
- SeatsSingle + 1 collaborator
Need team access? More than two researchers, custom credit allocations, or retainer-style support – write to drew@whitenbaker.com and we’ll scope it.
We file CVEs directly with MITRE. We do not depend on platform triage queues, and we do not wait for vendor permission to publish severity assessments that the public is entitled to know.
Engagement with Whiten Baker is direct, time-boxed, and adult. Programs that prefer to administer disclosures at their own pace are welcome to do so without us.
By the Numbers.
Whiten Baker production, year to date. All CVE assignments MITRE-verifiable via public lookup. Numbers replace adjectives.
Why a Whiten Baker PoC clears triage.
Four principles that govern every submission through the pipeline. Borrowed from our own CVE work and applied without exception.
Kill-loop before ship.
Every finding survives three adversarial passes before it is packaged. We try to falsify our own work harder than any reviewer will.
Evidence is gated.
Reproductions must be clean and independent. Three consecutive stable runs in an isolated environment, or it does not leave the lab.
Severity is calibrated.
CVSS vectors are scored conservatively and cross-checked against target program scoring conventions. We do not inflate.
Disclosure is direct.
If you want a CVE, we route to MITRE directly. We do not depend on platform queues to administer your finding’s identity.
Apply for access.
Cohorts of fifteen researchers admitted per month. Applications reviewed by the founder. Decisions returned within seventy-two hours.
Bring a recent finding if you want a Sandbox triage on first contact. Founders evaluating Whiten Baker for vendor engagement may apply through the same form and will receive a separate response.