We break systems before adversaries do.
Fjord.AI is an offensive security and AI research firm. We run red team operations, hunt for vulnerabilities, and publish CVEs — applying AI to go deeper and faster than conventional testing.
Offensive security, end to end
Red Team & Penetration Testing
Full-scope red team operations and penetration tests that emulate real adversaries — not checklist scans — to show how your defenses hold up under genuine pressure.
Vulnerability Research
We find, prove, and responsibly disclose novel vulnerabilities. Our team has published CVEs spanning enterprise software, infrastructure, and the Linux kernel.
Attack Surface Monitoring
By continuously mapping and monitoring your external attack surface, we help you spot exposure as it appears and stay ahead of the people looking for a way in.
Digital Recon & OSINT
We use open-source intelligence and digital reconnaissance to uncover threats, map attack surfaces, and turn scattered signals into actionable insight on your exposure.
AI Security Research
We research where AI and security meet — building tooling that accelerates offensive testing, and helping teams adopt AI systems without opening up new attack surface.
Cloud Security
Cloud architecture and security reviews that harden your environments against misconfiguration and privilege-escalation paths — before an attacker maps them first.
Proven across regulated environments
Through vetted, managed red-team programs, our team has performed penetration testing and vulnerability research across some of the most sensitive environments in the United States.
Intelligence Community
Red team support to national-security and intelligence missions in classified spaces.
Department of War
Red team operations supporting defense and warfighter missions.
Defense contractors
Security testing across the defense industrial base and prime contractors.
Federal agencies
Cabinet-level departments and federal civilian agencies.
Federal judiciary
National court systems and judicial infrastructure.
State & local government
City and state digital services and public platforms.
Healthcare systems
Large national hospital and medical research networks.
Private sector & Fortune 100
Enterprise red team and penetration testing for Fortune 100 companies.
CVEs & Disclosures
A selection of vulnerabilities our team has discovered and responsibly disclosed across enterprise software, infrastructure, and the Linux kernel.
NCEAS Metacat
SQL Injection CWE-89
NCEAS Metacat
Path Traversal CWE-22
Apache Solr
Authorization Bypass CWE-862
Intel Ethernet Controllers & Adapters
Use-After-Free Write · Linux kernel-mode driver CWE-416
Get In Touch
Planning a red team engagement, a penetration test, or a security review? Tell us what you're protecting and we'll scope the work with you.