09 / INDIVIDUAL RESEARCHERS & BUG BOUNTY HUNTERS
Put Djini to work on your next mobile investigation. Explore Android and iOS apps, validate findings on devices, and build your expertise with Mobile Hacking Lab Academy training.
You ask Djini
“Investigate this mobile app, follow the most promising attack path, and build a PoC I can run on the device to demonstrate the impact.”
What your team gets
An investigation connecting the code path, tested behavior, PoC, and evidence you can review for a bounty report or disclosure.
Access & scope
AppSec for mobile application testing; Research for advanced native analysis, fuzzing, and PoC workflows. Both include Mobile Hacking Lab training.
THE WORK BEHIND THE OUTCOME
Independent research means connecting many small jobs: understanding an app, following a promising path, preparing a test, and collecting evidence. Give Djini that connected workflow while you direct the investigation.
Bring an Android or iOS app, the relevant build, and the research scope. Work from a binary, or add source code when it is available.
Use analysis, agentic chat, and runtime investigation to explore app logic, component interactions, and connected APIs. Pursue the paths that matter to your hypothesis.
Have Djini prepare a PoC and test it on the selected device. Inspect the result, refine the experiment, and establish the conditions needed to reproduce it.
Bring together the affected version, reproduction steps, PoC, and observed impact. Review the findings and shape them into your bug bounty submission or disclosure.
INSIDE DJINI
Move from the research conversation to the terminal and connected device in the same workspace. Follow what Djini is doing and use the results to decide where to investigate next.
The Research bundle
Take the investigation into native code. Connect analysis, coverage-guided fuzzing, and autonomous PoC building and testing in one workspace.
01 / Coverage-guided fuzzing
Have Djini help build a focused fuzzing harness for a native library or parser. Use execution coverage to explore new paths, evolve the input corpus, and identify crashes worth investigating.
02 / Autonomous PoC building & testing
Let Djini build and run a proof of concept, inspect the execution result, and refine the test. Bring the generated code, device traces, and reproduction conditions back into your investigation.
You choose the target and assess the evidence. A reproduced crash, a confirmed vulnerability, and a working exploit are distinct research outcomes.
WHAT YOU TAKE AWAY
Connect the claim to a device result, target version, and reproducible test.
Review the generated PoC, traces, and execution output as part of your investigation.
Put your included Academy course to work on the same testing and research tasks you are pursuing with Djini.
Built by researchers. Proven in the arena.
Pwn2Own Ireland · October 2026
At Pwn2Own Ireland 2026, researchers used Djini.ai in successful demonstrations against two flagship phones. ZDI named Djini in the official results.
Research by Dimitrios Valsamaras, Ken Gannon of Mobile Hacking Lab, and Tenia Valsamara of CENSUS Labs. Photo and result reporting: TrendAI Zero Day Initiative. Awards recognise the researchers' demonstrated results.
More research with Djini · All research & advisories →
BYOD / TECNO Spark 30 Pro
Ken Gannon used Djini with a physical TECNO device to investigate its preinstalled apps. The published case study follows the one-click RCE chain and the supporting analysis.
Deep Scan / Samsung Dressroom
Research supported by Djini Deep Scan identified an arbitrary file write at system UID in Samsung's Wallpaper & Style restore workflow. Read the impact, reproduction, and fix details.
Deep Scan / Meta Horizon Shell
This Djini-supported investigation demonstrated automatic permission grants through virtual input injection on Meta Quest. The advisory documents the conditions and observed behavior.
Start curious. Go deeper.
From your first scan to an enterprise security program. Choose how far you want to go.
Meet Djini
Put your first app to the test.
Build securely
Everyday mobile security testing.
Go beyond
Advanced vulnerability research.
Your perimeter
Your infrastructure. Your control.
AI SAST requires BYOK; model usage is billed separately by your provider. The blackbox welcome scan is a one-time new-account credit. Device Lab capacity and usage depend on your plan.
A few good questions
Choose AppSec for Android and iOS app testing, mobile bug bounty work, and the CAPT/CIPT certification path. Choose Research for native-code investigation, coverage-guided fuzzing, autonomous PoC building and testing, and an included Android or iOS Userland Fuzzing & Exploitation course.
Both bundles save 20% compared with twelve monthly payments: AppSec is €1,440 per year and Research is €2,400 per year. Yearly AppSec also includes Advanced Android Hacking and the CAAH certification exam. Research includes your choice of the Android or iOS userland course.
You review the evidence and submit the report to the programme. A bounty depends on the programme’s scope, impact assessment, and duplicate policy. Djini helps with investigation and reproduction; it does not guarantee an accepted submission or reward.
PUT DJINI TO WORK
Start with 10 free AI SAST scans each month. Choose a bundle when you are ready to go further.