
Klaudia Kloc
CEO & Co-Founder of Vidoc Security Lab
Klaudia Kloc is CEO and Co-Founder of Vidoc Security Lab. An ethical hacker and security researcher, she combines hands-on offensive security experience with application security leadership. At BlockFi, she progressed from Security Engineer to Application Security Manager in just over two years. Previously, at Lufthansa Systems, she performed penetration tests and security code reviews, developed exploits and testing tools, and trained developers to write secure software.
Working across vulnerability research, exploitation and security architecture gave her firsthand insight into how real systems fail—and why traditional security approaches struggle to keep pace with modern development.
Together with Dawid Moczadło, she founded Vidoc Security Lab, a Silicon Valley startup building AI that finds real vulnerabilities in human- and AI-written code, validates the risk and proposes fixes. As CEO, she connects that technical foundation with a clear mission: making security keep pace with the software being built.
Klaudia is a Forbes 30 Under 30 honoree and has been named among the Top 100 Women in Engineering. Her speaking engagements include Stanford University, The Hack Summit, CAMLIS and ICCV, among others. She frequently gives interviews on cybersecurity, women in technology and the experience of women building companies in Silicon Valley, with appearances in Forbes Women Polska, Rzeczpospolita and 99 Twarzy AI. She and her work at Vidoc Security Lab have also been featured by Bloomberg, The Washington Post and CNBC.
Articles by Klaudia Kloc
9 articles published
April 14, 2026 (6mo ago)
We Reproduced Anthropic's Mythos Findings With Public Models
Anthropic framed Mythos and Project Glasswing as proof that frontier AI vulnerability research now needs gated access. We tested the public, patched cases with GPT-5.4 and Claude Opus 4.6 and found that the key building blocks are already accessible outside Glasswing, while reliable operationalization remains the real moat.
April 9, 2026 (6mo ago)
Reality Check on the Mythos Hype: AI Vulnerability Discovery Is Already Business as Usual
AI-assisted vulnerability discovery is already operational reality, not a futuristic breakthrough. The real shift is that exploit development and validation are becoming cheap enough to scale for both defenders and nation-state attackers.
October 24, 2025 (1y ago)
How we helped make Lovable more secure
A technical deep-dive into exploiting Firebase Auth emulator configuration via cookie injection, mixed-content bypasses, and subdomain trust boundaries - and how VIDOC helped Lovable secure their platform.
October 22, 2025 (1y ago)
Detecting complex vulnerabilities in real-world code: LLM benchmark for enhanced software security
Traditional SAST tools often miss complex business logic flaws, but can LLMs fill the gap? Research publication by Klaudia Kloc and Dawid Moczadło introduces a real-world benchmark to evaluate AI effectiveness in identifying vulnerabilities that standard tools overlook.
March 27, 2025 (1y ago)
Fake Engineer - Advanced Deepfake Fraud and How to Detect It
The candidate applied for an open backend position at our company Vidoc Security Lab. He had a decent CV and LinkedIn profile but used a deepfake during the coding interview, pretending to be a different person. This incident could be linked to a North Korean hacker group that has used this trick with many other companies.
September 27, 2023 (3y ago)
Vidoc Secures Funding from bValue!
Vidoc Security Lab has secured an investment from bValue, a leading player in the world of venture capital and technology innovation
May 9, 2023 (3y ago)
Ultimate 401 and 403 bypass methods
As a security researcher, I absolutely love the rush of discovering a suspicious endpoint during reconnaissance (which is super easy with VIDOC tool ;). It's exciting to think that you might have stumbled upon something important. However, that excitement can quickly turn into frustration when you're met with a 401 or 403 HTTP response code. Trust me, I've been there. But, over time, I've learned that there are ways to work around these error codes. I want to share some practical tips and techniques that I learned doing research, along with links to modules you can run in Vidoc Research to try to bypass 401 and 403.
February 6, 2023 (3y ago)
How we made $120k bug bounty in a year with good automation
2022 was very busy for several reasons, today we want to present to you what we did and learned doing large-scale bug bounty hunting
November 3, 2022 (4y ago)
Why good Recon is hard, and how we make it easy
What sucks the most about doing recon? It all started with that one tweet ;) Inspired by Greg's post we decided to write a summary of common problems with Recon and why Vidoc Research - our tool for security researchers - solves them all.