C:\HACK-CANADA.EXE_

On a mission to secure Canadian governments since 2019 !

Request your dataComing Soon

Our Work

In 2019, we had the idea to simply look at the posture of governments public websites to see how far behind they were. Since then we have been regularly scanning their public web infrastructure and growing our list of "targets". All this while building our own specialized tooling set. Let us tell you what 'gems' we are still finding even recently! Watch our presentations and learn about our ethical security research findings.

Scan Statistics

0 IP Addresses

0 Domains

Conference Presentations

SecTor 2025 - Hack_Canada.exe --v 4 --scan "Measuring Government Cybersecurity Posture: 5 Years of Attack Surface Analysis in Canada"

(Presented in English)

Hackfest 2024 - C:\Hack_Canada.exe - Surface d'attaque des gouvernements Canadiens

(Presented in French)

Hackfest 2019 - Surface d'attaque du gouvernement

(Presented in French)

Upcoming Presentations

No presentations planned at the moment.

Our Team

Meet the security professionals behind Hack Canada.

Steve Waterhouse

Patrick Mathieu

Patrick Roy

Thank You to Our Volunteers

A special thank you to all our volunteers who contribute their time and expertise to help secure Canadian governments.

Frequently Asked Questions

What is Hack-Canada?

Who Are We?

We are a loose coalition of volunteer hackers and security professionals aiming to up the security posture of Canadian government entities by actively scanning their publicly accessible attack surface for vulnerabilities and responsibly disclosing them to the public and affected government entities.

How are we responsibly disclosing our findings?

1. By presenting at security conventions
2. By disclosing directly to the affected parties via our contact network

Why are we doing this?

This is a purely patriotic motivated coalition with no political agenda and devoted to the strengthening of our collective security defences.

Who pays for this service?

We do this for free on our own personal time and pay out of our own pocket money for the infrastructure.

Is it legal?

Yes. By now, we would probably be all in prison if it was not the case. We have been at it for over 5 years! This said, we are professionals with high ethics standards and know how to not "cross the line in the sand". We do not advise anybody to try to reproduce what we are doing. Seek legal counsel before attempting anything remotely similar. We are not responsible for your actions.

Privacy Policy

We are committed to protecting your privacy and handling your data with care.

Information We Collect

We collect only the email address you provide to authenticate file access. We also log access attempts, IP addresses, and timestamps for security and audit purposes.

How We Use Your Information

Your email is used for authentication and sending magic links. We reserve the right to use your provided email address to communicate directly with you for responsible disclosure or coordination purposes related to cybersecurity matters. Access logs are maintained for security monitoring and compliance requirements. We never sell or share your personal information with third parties.

Data Retention

Magic links and access tokens are automatically deleted after expiration. Audit logs are retained according to compliance requirements and then securely deleted.

Security Measures

All communications are encrypted via TLS. Every action is logged. Our systems are monitored and updated regularly.

Last updated: December 2025