Skip to content

Corporate brand

Unclaimed

Taiwanese offensive-security company specializing in red team exercises, penetration testing and security consulting.

Last updated September 15, 2026

AI crawler reads

No AI crawler has read this profile yet.

Overview

DEVCORE (戴夫寇爾) is a Taiwan-based offensive-security company founded in 2012 and headquartered in Taipei. It describes itself as Taiwan's first security firm dedicated to providing red team exercises, and it also offers penetration testing and security consulting services. Its team is composed of security experts with hacker techniques and mindset, focused on researching global attack methods and the latest vulnerability techniques, and it has published and reported vulnerabilities in numerous internationally known products and services.

History

DEVCORE was founded in November 2012. In 2013 it reported a remote code execution vulnerability found in Yahoo's bug bounty program, and in 2014 it was first invited to speak at HITCON. In 2016 it found and reported an Uber SQL injection vulnerability through HackerOne. In 2017 it became the first security vendor in Taiwan to launch a red team exercise service, and in 2019 it was the first Taiwanese red team exercise provider invited to speak at the Red Team Summit; it also passed ISO 27001 certification in 2019. In 2021 it discovered and reported a Microsoft Exchange server vulnerability, and it has repeatedly placed in the Pwn2Own vulnerability research competition, including winning the title of Master of Pwn in 2021 and 2022. It has held its DEVCORE CONFERENCE offensive-security conference since 2019 and has run scholarship and internship programs since 2020 and 2022 respectively.

Products and positioning

Offensive-security specialist; Taiwan's first firm dedicated to red team exercises, built around hacker techniques and mindset.

  • Red team exercises

  • Penetration testing

  • Security consulting

Sources6 sources

Cite this profile: Cite the canonical profile. /brand-wiki/devcore · Editorial policy · How profiles are compiled