Run by a researcher who still writes the PoCs.

I started MemCyber after one engagement: a fintech that had paid two prior firms for pentests and still had a critical authorization flaw in production. I delivered the finding in a morning. The report came back with a working exploit and a one-line fix. That is still how the firm works.

I’m Atilla Mammadli — a security researcher with a long record on public and private bug bounty platforms, smart contract contests, and independent web application assessments. I still write every PoC personally. That is where the signal is.

Every engagement is run by the same senior researcher who scoped it. No junior hand-offs. No subcontractors. That constraint is the trade-off: it lets us move fast, read code carefully, and find the bugs that scanner-driven pipelines miss.