I am a web designer, developer, security researcher, and have experience triaging for numerous vulnerability disclosure programs. I write about bug bounty, open source, and security—often intertwining the subjects. You can learn more about me and my work here.

In 2017, I published an Internet draft for a proposed standard which allows websites to define security policies called security.txt. A year later, I created Bug Bounty Guide, a launchpad for bug bounty programs and bug bounty hunters.