What is Paperless?

Paperless is the cybersecurity research team at CIT. We research, build, and publish original work across vulnerability research, exploit development, reverse engineering, and applied security tooling.

Why we publish

We publish in the spirit of Project Zero, Google’s public vulnerability research team. Like Project Zero, we believe that sharing detailed, technical research — not just the findings, but the process behind them — makes the industry more resilient. Attackers already trade this knowledge among themselves; defenders should too.

What to expect

Posts here are technical and written by the researchers who did the work: exploit chains, reverse-engineering write-ups, tooling we built along the way, and the occasional dead end we thought was worth documenting.

Get in touch

Find our work on GitHub.