A small lab, on purpose.
Root Axis Labs is one operator, a bench, and a rule: if we wouldn't hand the report to our own family, it doesn't ship.
The company started as a way to sell the hardware and tooling I already trusted, and to take on the kind of testing where the report matters more than the logo on the cover. Everything here is deliberately small: a short list of services, tools that fit on one page, and a shop that only lists what is actually in stock.
The free tools are the ones I use during engagements. They run entirely in your browser because sending your tokens and configurations to someone else's server is a bad habit to build.
The name is the idea: root is the access you are trying to earn, axis is the coordinate you have to find first. Most security work is figuring out where you actually are before you move.
- operator
- one
- based
- United States
- focus
- testing, tooling, hardware
- authorization
- always written
- response
- 1 business day
How we work
Scope first
No testing without a signed authorization that names the assets, the window, and the contact who can stop it.
Evidence over adjectives
A finding is a reproduction, not a scanner line. If it cannot be shown, it goes in the limitations section.
Your data stays yours
Minimal proof, redacted in the report, deleted at the agreed date. No screenshots of customer records in a slide deck.
Fixes you can schedule
Each finding gets the specific change, and a compensating control if the real fix is a quarter away.