Our Research

Philosophy

Somewhere right now, a researcher is finding a vulnerability nobody has named. The only question is which side they're on. Searchlight Labs exists to make sure it's ours. Our offensive researchers hunt zero-days in the enterprise software the world runs on, and every discovery becomes a check in Searchlight Exposure before public disclosure, so our customers close exposures while everyone else waits for a CVE that doesn't exist yet.

Everything Searchlight Labs publishes holds the same standard: research from the source, proven before it's published. If it's in a Labs report, we found it, we proved it, and you can act on it.

Latest Research

Research

Cache Me If You Can: XSS in Cloudflare's /cdn-cgi/image/

October 28, 2026

Research

High Fidelity Detection Mechanism for php2shell (CVE-2026-109618 and CVE-2026-109619)

October 22, 2026

Research

How practical is 100k requests per second? Introducing h3fuzz

October 20, 2026

Research

More Critical Bugs in Adobe Experience Manager: Pre-Auth RCE

October 15, 2026

Research

Leaking the Keys to the Kingdom: How a Single Slip Handed Over a Darknet Empire

October 8, 2026

Research

A JPEG, a Race, and a Ghost: Breaking Discourse's Image Pipeline

October 7, 2026

Open Source Tools

Go

Surf

Escalate your SSRF vulnerabilities on Modern Cloud Environments. surf allows you to filter a list of hosts, returning a list of viable SSRF candidates.

Python

wp2shell checker

Check whether your WordPress site is affected by the pre-authentication RCE in WordPress Core. A free checker from Searchlight Cyber.

No result to show

Try looking for something else.

See all

Looking for browser-based security testing tools?