Software Development & Security
 
 
 

Offensive security meets production engineering. Small team. Ulaanbaatar, Mongolia.

[ SERVICES ]

From code to
compromise.

[01]

Penetration Testing

OSWE-certified assessments across web, API, and mobile attack surfaces.

[02]

Full-Stack Dev

Next.js, React, Go - security-first from line one.

[03]

Security Engineering

Source code review, threat modeling, and hands-on remediation.

[04]

Infrastructure

Containers, CI/CD, cloud migrations. No shortcuts.

[ TEAM ]

Small crew.
Sharp edges.

Every one of us writes code, breaks code, and ships to production. No managers. No overhead.

Erdene-Och Byambabayar
@ochk00

Erdene-Och Byambabayar

Tech Lead

Full-stack architect. System design to deployment.

Next.jsDockerAWS
Byambaa Battulga
@tulgoasi

Byambaa Battulga

Software Engineer

Crypto & backend. 5 years deep. CTF competitor.

PythonUnixCrypto
Uuganbayar Lkhamsuren
@uug4na

Uuganbayar Lkhamsuren

Security Engineer

OSWE. 40+ pentests. Finds what scanners can't.

OSWERed TeamGo
[ SECURITY RESEARCH ]

Bugs found.
CVEs published.

Active in bug bounty programs and responsible disclosure - making open-source safer, one CVE at a time.

11

CVEs Published

4

High / Critical

8

Companies

Popped bugs from
Google

Google

Yahoo

Yahoo

AWS

AWS

Monero

Monero

Lambda.global

Lambda.global

Агула Даатгал

Агула Даатгал

Татварын Ерөнхий Газар

Татварын Ерөнхий Газар

Vercel

Vercel

[ WORK ]

Shipped &
secured.

Repositories
8
public

Unread 100

TypeScript
public

MeForm

TypeScript
public

TalentSummit

TypeScript
public

DataSummit

TypeScript
private

Unread Games

Flutter
private

Blockchain Core

TypeScript
private

GoBack

Go
private

Bot Check

TypeScript
[ Contact ]

LET'S
TALK.

Security assessment or a full product build - we're ready.

contact@catbyte.mn