Bio


My research focuses on building automated, agentic systems to identify and mitigate structural security and privacy risks at internet scale.

I hold a PhD from KIT. Previously, I was a Visiting Scholar at UC Davis. I also work closely with the if(is) and Intellisec research groups and I am a core maintainer of the open-source project HTTP Archive and the Editor-in-Chief of the Web Almanac.

I actively translate my research into operational tools. I am the founder of the global threat intelligence platform SecuSeek.