Skip to content
WHO WE ARE

We think like
the people you
fear most.

APX was built on a simple, uncomfortable idea: the only way to know you're safe is to be broken into — on your terms, by someone on your side. So we built an attacker that does exactly that, and proves every word of it.

~/apx/manifesto.txt
$ cat manifesto.txt
› Defense is a guess until someone tries the door.
› A finding without a working exploit is just an opinion.
› AI writes the code now — so AI had better be testing it.
› We'd rather show you the breach than read about it.▋
01
Proof over noise
No CVSS theatre. We hand you the exploit and the exact path in, or we say nothing.
02
Attacker's mindset
We don't audit a checklist. We reason toward the blind spot the way a real adversary would.
03
Speed is safety
Hours, not weeks. The faster you find it, the smaller the window an attacker gets.
THE CREW

Small team. Loud results.

Gaurav Singhal
Gaurav Singhal
FOUNDER & CEO

20+ years in security. Led 100+ engineers at AWS building security testing infrastructure — API pentesting, web pentesting, static analysis, cloud security, network drift detection — protecting millions of accounts across thousands of services.

CISSPCSSLPGICSP
LinkedIn
Nilanjan Bhattacharya
Nilanjan Bhattacharya
CO-FOUNDER & CTO

20+ years building and scaling enterprise software, product, and security platforms. Led engineering and product initiatives across cloud, identity, automation, and developer workflows — bringing deep experience in turning complex technical systems into products teams can adopt and trust.

LinkedIn
Dev Saini
Dev Saini
FOUNDING ENGINEER

6 years shipping developer tooling and security automation. Builds the engine that does the breaking — ships Niro into pipelines so the next bug never reaches prod.

LinkedIn

Want to break things for a living?

We're hiring people who'd rather find the bug than file it.