Engineering Testimonials & Evidence

Verified Client Reviews & Case Studies

Discover how development squads, fintech CTOs, and principal architects leverage our manual code audits to eliminate logic vulnerabilities and secure core application workflows.

Manual Source Code Security Audit & Vulnerability Triage May 2026
“Glow Axispoint inspected our core settlement engine written in Go and PostgreSQL. They caught a subtle concurrency race condition in our balance decrement routine that our internal automated test suite and commercial SAST scanner had completely overlooked. The initial debrief was dense with findings, but their remediation pull requests gave our team exact syntax patches rather than vague advice.”
Key Outcome: Remediated 4 high-severity logic vulnerabilities prior to external compliance audit.
David Kuo
VP of Engineering • FinLattice Tech (Taipei)
Application Architecture Threat Modeling & Boundary Analysis March 2026
“We brought in Meixuan Li's team during our microservices migration. The STRIDE threat modeling workshops forced our backend engineers to rigorously re-examine token propagation across our internal gRPC channels. We had a slight scheduling bottleneck getting all seven squad leads aligned in the first week, but the resulting Data Flow Diagrams and mitigation roadmap have become foundational architecture references across our engineering org.”
Key Outcome: Eliminated unauthenticated internal service hops across 14 microservices.
Stephanie Tsai
Director of Software Architecture • Aetheria Cloud Solutions
API Security & Authorization Flow Verification February 2026
“Our GraphQL API was experiencing complex nested query performance degradation and potential tenant boundary leakage. Glow Axispoint mapped every resolver query path, proved two Broken Object Level Authorization vectors with minimal reproduction payloads, and guided our team through implementing query depth limiters. Direct communication with the auditor in our shared review repository made resolution straightforward.”
Key Outcome: Closed 2 critical BOLA flaws and implemented hardened GraphQL depth filters.
Marcus Thorne
Head of Product Security • OmniVault Logistics
Remediation Engineering & Secure SDLC Advisory January 2026
“Rather than dropping a PDF report and disappearing, Chenghao Lin spent two weeks pairing directly with our developers on PR reviews and custom AST rules. We did encounter some friction initially adapting to their stricter linting rules in CI, but our team now catches insecure deserialization and missing tenancy parameters long before code reaches staging.”
Key Outcome: Reduced recurring authorization regression bugs to zero over a 6-month testing window.
Hao-Ting Chang
Lead Backend Engineer • Kinetix Health Systems (New Taipei City)
Extended Case Study

Pre-Launch Security Audit of a High-Volume Settlement Gateway

Context & Technical Challenge

A leading digital asset platform based in Taipei was preparing to roll out a high-throughput settlement engine orchestrating balance allocations across 12 banking partners. The backend was constructed with Go microservices utilizing PostgreSQL transactions with optimistic concurrency locking.

The Audit & Discovery

During a two-week manual code review, Glow Axispoint identified a subtle asynchronous race condition between deposit webhook handling and user-initiated settlement requests. Under specific network latency spikes, multiple worker threads were capable of decrementing the same uncommitted ledger snapshot, leading to balance state inconsistencies.

Remediation & Result

Our principal auditors drafted an exact patch implementing serializable database isolation levels with distributed Redis mutex locks for sensitive account mutations. In addition, we provided custom regression test suites in Go to simulate concurrent payload collisions. The platform launched on schedule without ledger discrepancies during initial production volume spikes.

Confidential Engagements

Experience the Rigor of Manual Code Auditing

Join forward-thinking development teams across Taiwan and the region who trust Glow Axispoint with their most critical software assets.

Schedule Your Scoping Call