security engineering @ clerk · computer engineering @ uoft · 3x hackathon winner
i break auth flows for a living and break everything else for fun.
blackbox. an open-source digital forensics recorder for cli agents. session timelines, risk flags, and one-command incident reports for when an agent goes sideways.
auth internals — oauth2/oidc, session handling, access control, token lifecycles
agent security — runtime safety, mcp tool risk, ai vulnerability hunting harnesses
tooling — semgrep, codeql, burp suite, trufflehog/gitleaks, threat modeling