Send a message

A few lines about what you're working on or thinking about is plenty. I read everything that comes through.

No production access is requested without written approval.

Direct
What I write & build about
  • AI-agent security
  • MCP security
  • SOAR playbook design
  • Prompt-injection defense
  • AI-SOC prototypes
  • IOC enrichment workflows
What I can help with
  • Securing tool-calling agents and MCP tool surfaces
  • Designing guardrails, approval gates, and audit logging
  • Building SOAR playbooks and IOC enrichment workflows
  • Prototyping AI-assisted SOC workflows
  • Threat modeling for agentic security systems
What I do not do
  • Legal or regulatory compliance advice
  • Unauthorized testing of any system
  • Black-hat activity of any kind
  • Credential abuse or access circumvention
  • Production access without written approval
Prefer to read first?

Explore the work.

Browse what I'm building and writing about, or walk through a sample agent security review.