TwistedFN Solutions
Application security
Secure code review, threat modeling and vulnerability triage across application boundaries and trust decisions.
Cybersecurity & product engineering
Find the weakness.
Build the fix.
We help make software safer through code review, authorized security testing and practical fixes. We also build native apps for Apple platforms, with privacy considered from the start.
Authorized testingControlled researchHuman-reviewed fixes
What we do
Security work grounded in software engineering.
Understand the risk, find its cause and make a change you can verify. Our work connects each security finding to a practical next step.
Vulnerability validation
Controlled reproduction, evidence collection and impact analysis for findings on systems within an approved scope.
Secure networking
Encrypted transport, privacy architecture and trust-boundary analysis for clients, services and difficult networks.
Native product engineering
Privacy-first iOS and macOS software built with Swift, SwiftUI and the security controls of the platform.
Evidence before severityReproducible findings, not speculative labels.
Authorization before accessClear ownership, scope and stop conditions.
Verification after remediationRe-test the fix and document residual risk.
Method
From the first review to the final re-test.
A clear scope, documented findings and a fix that gets checked.
Inventory
Map the systems, data flows and trust boundaries in scope.
Discover
Review code and behavior for weaknesses worth investigating.
Validate
Reproduce safely and separate evidence from assumption.
Remediate
Turn the root cause into a focused patch or control change.
Verify
Re-test the fix, record the result and close the loop.
Research boundary
Capability needs control.
Security research is performed only on systems we own or are explicitly authorized to assess. Automation accelerates analysis; it does not replace scope, judgment or accountability.
- Approved assets and actions are defined before work begins.
- Research uses isolated environments and least-privilege access.
- Sensitive actions require a human checkpoint.
- Findings end in remediation, re-testing and responsible disclosure.
Product engineering
We also build the software we want to protect.
Our own product work keeps security decisions close to implementation, release engineering and support.
In development
LoopholeVPN
A privacy-focused VPN for iPhone and Mac, built around modern encrypted transports, a simple connection experience and a strict no-traffic-logs design.
The people behind the work
Security has a point of contact.
Led by Barsam Ershadi, our Founder, CEO and Head Cybersecurity Analyst, our team brings together security research, engineering and client support.
Meet the teamHave a defined security problem?
Tell us about your system, the scope of work and the outcome you need.