Frequently asked questions

KuniNogu is the public name used by Kuniyoshi Noguchi (野口 晋義), a cybersecurity engineer working across AI security, vulnerability research, security operations, incident response, threat hunting, and detection engineering.

Relevant areas include AI application and MCP security, trust-boundary and authorization review, vulnerability research and coordinated disclosure, incident investigation, threat hunting, detection engineering, and technical writing or speaking. Specific scope and availability can be discussed through the Contact page.

Research does not end with discovery. After safe reproduction, coordinated disclosure, and remediation review, the root cause is translated into detection logic, hunting hypotheses, relevant telemetry, and incident-response guidance that defenders can use in operations.

KuniNogu follows coordinated vulnerability disclosure: report privately to the vendor or maintainer, provide a minimal and safe reproducer, allow reasonable time for remediation, review the fix, and publish a defender-focused analysis only after coordination permits it.

No working exploit chain, actionable attack steps, or embargoed details are published for an unfixed vulnerability. Customer, employer, and client data are also excluded; public research uses a controlled lab and public artifacts.

Use the Contact page for research collaboration, speaking, writing, or recruitment inquiries. For sensitive vulnerability information, follow the coordinated-disclosure guidance and security.txt linked there.

Yes. This site provides dedicated Japanese and English pages, and inquiries can be sent in either language.