Hello!
I wanted to share a quick update on the cybersecurity project I've been working on. Our automated DAST (Dynamic Application Security Testing) service for development teams — PatchOne Security — has officially launched in beta.
So far we've been working with government organizations, academic institutions, and companies in Korea, but we're now actively looking to expand our tester base globally. If your company runs a web service, app, or API and you'd like a real vulnerability check done at no cost, this might be a good fit.
I'm also part of the PatchOne team, and my colleague Dongyoung (who leads the project) has put together a full overview below. He'd be happy to jump on a quick call or answer any questions directly.
[Message from My friend]
Hi,
My name is Dongyoung Kim, and I'm reaching out from PatchOne Security, a cybersecurity startup founded by researchers from KAIST (Korea Advanced Institute of Science and Technology).
We're currently offering a free initial security analysis to a select group of beta partners, and I'd like to invite your company to participate.
What We Do
PatchOne is an AI-powered vulnerability assessment service designed for startups and small-to-mid-sized IT companies that don't have a dedicated security team. Unlike traditional security tools that require your team to install, operate, and interpret results on their own, we handle the entire process — from scanning your web services, apps, and APIs to delivering a clear, actionable report.
You simply share the relevant URLs, API endpoints, and test credentials within a scope you're comfortable with. We take it from there.
Who This Is For
Companies without in-house security personnel
Teams running web services, mobile apps, or APIs in production
Companies preparing for client security audits, investor due diligence, government grants, or procurement requirements
Teams that have security tools but lack the bandwidth to operate them
Development teams wanting to identify key risks before launch or a major update
What You Receive as a Beta Participant
Vulnerability assessment covering web, app, and API attack surfaces
Risk severity ratings and prioritized remediation guidance
A developer-ready remediation guide for each identified vulnerability
An optional results walkthrough meeting
A formal security assessment record suitable for internal use or external submission
How It Works
All analysis is conducted strictly within the scope agreed upon in advance. We do not perform any tests that could disrupt your live service. As we are currently in beta, the initial analysis is provided at no cost.
If you'd like to understand the current security posture of your service without the overhead of managing security tooling yourself, I'd be happy to set up a brief call or answer any questions by email.
Thank you for your time.
Best regards,
Dongyoung Kim
PatchOne Security | KAIST-based Cybersecurity Research Team
Website: https://patchone.dev
Email: dongyoung0912@kaist.ac.kr
