About

I'm a security analyst focused on application security: validating and triaging vulnerabilities across web, API and mobile targets, and helping people understand what a finding actually means and how to fix it.

This site is my portfolio and lab notebook. It holds my web app security writeups, and it's growing to include hardware hacking projects.

You can see my background on the resume page, or reach me through LinkedIn, GitHub or email.