I help people stay safe as AI changes how we build software. I also work on the messier human bit, the problems that show up when attackers have AI too and we can't tell what's real any more.
Secure development when agents and non-developers write code.
Deepfakes, my own clone, consent and synthetic identity.
What I'm learning as I build something new: the decisions, the mistakes, the team.
I talk about AI, human risk and the uncomfortable parts of security that involve people rather than systems. I've keynoted and joined panels around the world, including Black Hat USA.
Agile Application Security and Security for Everyone. Both argue that security is a quality of good software, not a discipline bolted to the side of it.