Synthetic Codex Research Lab is an independent applied security and systems research initiative led by
Joseph Bulliner, Director of Applied Security Research. The lab focuses on understanding how real
systems fail: where authorization assumptions break down, where workflows can be bent, and where infrastructure
behavior diverges from the mental model developers had when they shipped it.
What Synthetic Codex does
The lab concentrates on real-world environments: web applications, API-heavy backends, and multi-tenant
systems. The goal is not collecting CVEs for vanity, but building reusable patterns that help prevent entire
classes of security failures.
- Mapping how authorization is implemented vs how it’s intended
- Analyzing multi-tenant isolation and cross-tenant data exposure risks
- Stress-testing workflow integrity and state machines
Who runs it
Synthetic Codex is led by Joseph Bulliner, serving as Director of Applied Security Research.
He is responsible for research direction, tooling evaluation, methodology design, and ensuring all work
operates within clear ethical and legal boundaries.
Applied security research
Infrastructure thinking
Manual-first analysis
How it operates
The lab uses a manual-first approach supported by carefully chosen tools: HTTP proxies, structured note
systems, observability pipelines, and AI-assisted analysis for large data or log volumes. All external work
is restricted to clearly authorized scopes such as bug bounty and vulnerability disclosure programs.
Proxy-centric workflow
Structured recon
AI in the loop
Mission
The mission of Synthetic Codex is to make complex systems fail more safely. That means identifying how
authorization, state, and infrastructure behave under stress, and turning those findings into practical,
fixable recommendations rather than abstract theory.
For vendor or collaboration inquiries, contact:
Joseph Bulliner, Director of Applied Security Research –
contact@syntheticcodex.com.