Offensive and defensive software security analysis and protection
Quarkslab is a Paris-based security research firm founded in 2011, operating at the intersection of academic research and applied software defense. The tech stack—C++, Java, Python, IDA, Ghidra, Frida, AFL++, QEMU, Triton—reflects a deep systems-level focus on binary analysis, reverse engineering, and fuzzing. Active projects center on Java bytecode protection, mobile and IoT vulnerability discovery, and parser fuzzing, while the hiring profile skews heavily toward research and senior technical roles, suggesting Quarkslab prioritizes depth of expertise over rapid scaling.
Quarkslab provides software security services combining offensive research (vulnerability discovery, reverse engineering) with defensive tooling and consulting for mid-market and government organizations. The company operates two core products—QFlow and QShield—alongside custom consulting engagements and R&D lab work. Their approach flips the traditional security model by forcing attackers to adapt continuously rather than defenders. The organization is self-owned and operates in France and Argentina, with a small, senior-heavy team reflecting a consulting-and-research business model rather than a high-volume SaaS operation.
IDA, Ghidra, radare2, Frida, AFL++, QEMU, and Triton. These tools cover binary disassembly, fuzzing, dynamic instrumentation, and protocol analysis.
Java protection and bytecode transformation tools, mobile/IoT vulnerability research, fuzzing campaigns for parsers and protocols, and QShield product evolution; research-led rather than sales-driven.
Other companies in the same industry, closest in size