About
Offensive security that holds up.
ProjectMerai is an offensive-security outfit. We take apart the systems people rely on and understand them to the bottom.
What we are
Research first, not a product pitch
Offensive security is a loud field. It is full of tools that overclaim, dashboards that count things nobody asked about, and findings that fall apart the moment someone checks them. ProjectMerai exists to do the slower, quieter version: build tools that are honest about what they find, publish research that other people can reproduce, and hold that line even when it costs us speed.
We work in the open under the ghostvectoracademy organization, so the work can be checked rather than taken on faith. Our first tool, DLLHijackHunter, was selected for the Black Hat SECTOR Arsenal.
The name
On “Merai”
Merai is a character from The Still Point, a dark mythological-fantasy novel written by our founder. The name carries a quiet gravity. A still point is the calm, precise center that holds while everything around it moves.
That is the whole idea behind the org. Security work throws off an enormous amount of noise: maybes, might-bes, and findings dressed up as more than they are. Our job is to be the part you can trust without a caveat. The tool that reports only what it proved. The writeup that says exactly what was tested and what was not. The claim that waited until it was true. Whatever we put our name on, that is the standard it has to meet.
How we work
Four things we hold to
- 01
Proof over volume
A short list of things that are true beats a long list of things that might be. We would rather report three findings we can stand behind than thirty we cannot. (This is also, not by accident, how DLLHijackHunter works: it confirms a hijack actually loads before it calls it a finding.)
- 02
Open by default
We build and publish in the open. Methods, not just results. If we cannot explain how we reached a conclusion in a way you could follow and repeat, it is not finished.
- 03
Honest about the edges
Every result has a boundary. We say plainly what we tested, what we did not, and where the claim stops. An honest limit is worth more than a confident guess.
- 04
Craft over noise
No hype, no fear-selling, no inflating a medium bug into a headline. The work speaks at its real size, which over time is louder than the alternative.