About Synthetic Codex Research Lab

Synthetic Codex Research Lab is an independent applied security and systems research initiative led by Joseph Bulliner, Director of Applied Security Research. The lab focuses on understanding how real systems fail: where authorization assumptions break down, where workflows can be bent, and where infrastructure behavior diverges from the mental model developers had when they shipped it.

What Synthetic Codex does

The lab concentrates on real-world environments: web applications, API-heavy backends, and multi-tenant systems. The goal is not collecting CVEs for vanity, but building reusable patterns that help prevent entire classes of security failures.

  • Mapping how authorization is implemented vs how it’s intended
  • Analyzing multi-tenant isolation and cross-tenant data exposure risks
  • Stress-testing workflow integrity and state machines

Who runs it

Synthetic Codex is led by Joseph Bulliner, serving as Director of Applied Security Research. He is responsible for research direction, tooling evaluation, methodology design, and ensuring all work operates within clear ethical and legal boundaries.

Applied security research Infrastructure thinking Manual-first analysis

How it operates

The lab uses a manual-first approach supported by carefully chosen tools: HTTP proxies, structured note systems, observability pipelines, and AI-assisted analysis for large data or log volumes. All external work is restricted to clearly authorized scopes such as bug bounty and vulnerability disclosure programs.

Proxy-centric workflow Structured recon AI in the loop
Mission

The mission of Synthetic Codex is to make complex systems fail more safely. That means identifying how authorization, state, and infrastructure behave under stress, and turning those findings into practical, fixable recommendations rather than abstract theory.

For vendor or collaboration inquiries, contact:
Joseph Bulliner, Director of Applied Security Research – contact@syntheticcodex.com.