Software Security · Reverse Engineering · R&D
We take software apart
to find what's wrong with it.
SOFTLAB is an independent practice working at the boundary of security research, low-level reverse engineering, and applied R&D — increasingly with machine learning doing part of the analysis.
01 — About
A small practice, kept deliberately small.
SOFTLAB is the working name of an independent software security and R&D practice, run by a single principal rather than scaled into a consultancy.
That's a deliberate shape, not a limitation. Reverse engineering and vulnerability research reward depth over headcount — one person tracing a fault through a binary, a protocol, or a driver, until the actual cause is on the table rather than a plausible guess.
The work spans classic security research and reverse engineering, applied R&D on internal tooling, and — since it sits close to daily practice — hands-on IT systems consulting and hardware maintenance for the same class of infrastructure being analyzed.
02 — Capabilities
What the work actually is.
Software Security Research
Vulnerability analysis and hardening review of native and embedded software, from isolated components to full builds.
Reverse Engineering
Disassembly and behavioral analysis of binaries, firmware, and undocumented protocols where no source is available.
AI-Assisted Defect Analysis
Models trained to read crash reports, logs, and static-analysis output and point at the likely root cause.
Applied R&D
Experimental tooling built to answer a specific technical question first, and generalized only once it's proven useful.
IT & Systems Consulting
Advisory work on infrastructure and device management for teams who need a second, more adversarial opinion.
Hardware Reverse Engineering
Board- and chip-level analysis of devices — PCB inspection, chip identification, firmware extraction — the physical layer underneath everything above.
03 — Current Focus
Teaching a model to read a stack trace the way a reverse engineer does.
The most recent line of work is a set of AI models built specifically to analyze software errors — not to replace the manual RE process, but to triage it.
Given a crash report, a log bundle, or static-analysis output, the model proposes what kind of fault is present — a null dereference, a use-after-free, a race — and how confident it is, before a human spends time confirming it by hand.
Stage 1
Signals in
Crash dumps, logs, and static-analysis output are normalized into a common representation.
Stage 2
Model inference
A model trained on known defect patterns scores the likely fault class and points at the suspect region.
Stage 3
Human verification
Findings are handed to manual reverse engineering to confirm the cause and close the loop back into training.
04 — Engagements
Ways to work with Softlab.
Security & Vulnerability Assessment
Hands-on review of a specific binary, service, or embedded system. Delivered as a written findings report with reproduction steps and severity ranking.
Reverse Engineering Engagement
Disassembly and behavioral analysis of a binary, firmware image, or undocumented protocol where no source or documentation exists. Delivered as findings your own team can act on.
AI-Assisted Defect Triage
Feed in crash reports, logs, or static-analysis output; get back ranked root-cause candidates before manual investigation starts. Best suited to teams already producing crash/log volume.
IT Systems Consulting
Advisory on infrastructure and device management from a security-minded perspective — as a standing retainer or a single assessment.
Hardware Security Testing
Physical-layer analysis and repair of computing equipment, extending to fault-injection and side-channel techniques when hardware-level security analysis is called for.
Small-Scale Development
Focused development work in C, C++, and Kotlin — tools, utilities, and components sized for a single developer to own end-to-end, not a full team project.
Every engagement starts with a short scoping conversation — email sl4wek@pm.me describing what needs looking at.