If your developers call you the “Iron Dome,” upper management is dropping way too many bombs. Protect your devs at all costs. 🛡️
15+
Years shipping
Cybersecurity Expert ∙ Software Engineer ∙ Bug Hunter
Building safe & secure systems. Breaking the bad.
I’ve spent 15 years writing, designing, securing and breaking systems across automotive, industrial and mission-critical software. I keep architecture simple — because you can’t secure what you can’t understand.
01Projects
Selected work
Projects
Software isn't art; it's engineering. Complexity is the enemy of security. I don't look for 'intricate details'—I try to eliminate them. By keeping the code and architecture simple, I build systems that are actually robust. You can't secure what you can't understand.
01
Adsify
A REST API that wraps Beckhoff TwinCAT ADS. HTTP in, PLC data out. Authentication, rate …
02
OpcSharp
A free OPC UA SDK for C#. No dependencies, no ceremony. Plain C# that talks OPC UA.
03
iceoryx2 C# Language Bindings
C# bindings for iceoryx2 zero-copy IPC middleware. Part of the eclipse-iceoryx project.
04
HMI/Scada Tool Development
A software solution for managing and controlling industrial printing presses, providing …
05
Threat Analysis and Risk Assessment Tool Development
A software tool that helps me to uncover and evaluate the potential attack surfaces in …
06
Security Assessment for High Performance Middleware
Security assessment of high-performance middleware using static analysis and fuzzing.
07
Modular Threat Catalog
Description Used Tools and Technology 08
Security Assessment for Automated Driving Software
Description Used Tools and Technology
02Blog
From the field
From My Blog
All PostsCRA Isn't New. OT Just Wasn't Listening.
The EU Cyber Resilience Act is panicking the OT world. Mission-critical software has shipped under stricter rules for thirty years. The standards aren't the problem. The architecture is.
CRACybersecurityOT
Code Got Cheap. The Hard Part Didn't.
Coding agents made writing code fast. They did not make software fast. The bottleneck just moved.
AI AgentsCoding AgentsSoftware Engineering
Spec-Driven Development, but the Specs Are a Graph
A 12-lesson course that rebuilds the DeepLearning.AI spec-driven development tutorial on Rust + sphinx-needs — and the AgentClinic domain you build to learn it.
Spec-Driven DevelopmentSphinx-NeedsPharaoh
03Notes
Short thoughts
Latest Notes
All NotesThe argument for Rust in 2026 isn’t safety. It isn’t speed. It’s that AI writes it better than it writes C++. The compiler answers fast. The model listens. Every error is a free lesson. Rust got built for this work ten years before anyone needed it to be.
trying to be a dev, DevOps, DevEx, manager, and CTO at the same time is a one way ticket to burnout town on the express lane
04About
Short story
Short Story About Me
Inspiration comes from looking at the data. My career started with game hacks—poking at binaries to see what the hardware was doing. Since then, I’ve worked across different domains and languages, always looking for the simplest way to make the computer do the work.
You can’t secure what you can’t understand.