dolgikh.info

What It Is

dolgikh.info is the personal website of cybersecurity researcher Ivan Dolgikh. It is positioned more as a security research blog and freelance service entry point than as a standardized cybersecurity product. The content shows that the author has long been involved in security research, development, malware analysis, reverse engineering, vulnerability assessment, incident response, and web security, while also sharing self-developed tools, experiments, and case studies.

Core Capabilities and Protection Scope

In terms of protection areas, the site covers malware analysis, Windows application reverse engineering, web security, infrastructure vulnerability assessment, incident response, and security risks in enterprise short-link services. In the short-link case study, the author focuses on how internal enterprise short-link services can lead to sensitive information leakage when they are externally accessible, lack scanning protection, or are misused by employees. Recommended mitigations include rate limiting, CAPTCHA, suspicious activity monitoring, IP blocking, link content scanning, expiration mechanisms, authentication, and log auditing.

However, these materials are mainly presented as research recommendations and case analyses. The content does not indicate that the site provides deployable software, a cloud platform, a management console, or a managed protection service, so its “deployment model” and “integration capabilities” cannot be confirmed. For management and alerting, the articles propose security practices such as logging, monitoring, and automatic notifications to responsible personnel, but they do not demonstrate that the website itself has corresponding productized capabilities.

Pricing and Compliance

The site has a “Hire me” entry point and states that the author currently focuses on research and freelance projects, with clients from different countries, and only accepts security research projects under formal agreements. However, the content does not disclose pricing, subscription plans, project-based fee ranges, payment methods, SLA terms, or delivery timelines. No compliance certifications such as ISO, SOC, CREST, or OSCP are shown either, so its compliance maturity cannot be assessed based on the available information.

Pros and Cons

The main advantage is that the content is practical, explaining from real enterprise scenarios how seemingly ordinary tools can become entry points for information leakage. The author’s technical coverage is broad, making the site relevant for scenarios requiring reverse engineering, malware research, or specialized security assessments. The drawbacks are also clear: this is a personal website, with limited information about team size, client cases, service boundaries, response mechanisms, contract templates, pricing, or certifications. For enterprises that need long-term managed protection, unified alerting, audit reports, and compliance backing, the level of transparency is insufficient.

Who It Is For and Access from China

It is better suited for security researchers looking to study case examples, or for companies that need customized cooperation on specialized reverse engineering, malware analysis, short-link security audits, or web vulnerability assessments. For Chinese companies, further confirmation would be needed regarding access stability, communication language, contract signing, cross-border payments, and data export requirements. The content does not provide information on access from China, payment methods, or local support, so China accessibility should be considered unknown. Possible alternatives include local security service providers, MDR/SOC services, vulnerability management platforms, URL security gateways, or threat intelligence services.