Co-founder · Operations · Research
Decide what to change. Protect what cannot fail.
Co-founder of ITRES and SG6. More than twenty years connecting business, infrastructure and cybersecurity so technology decisions hold up in real-world operations.
01 / Approach
Business / Infrastructure / Risk
How I work
Problem first. Architecture second.
I work where continuity, performance, cost, vendors, risk and team capacity tend to collide.
I do not start from a particular tool. I start from how the organisation operates, what it depends on and how long it can afford to be down. Architecture comes next.
From decision to operations
- 01Discovery
Inventory, dependencies, incidents and single points of failure.
- 02Priority
Impact, urgency, cost and the actual capacity to execute.
- 03Operations
Owners, controls, dates and recovery conditions.
Connected domains
02 / Research
Offensive / Defensive / Applied
Recent work
Understand how technology fails to defend it better.
Reproducible findings, disclosure and tools that turn a technical anomaly into useful knowledge for other teams.
AI · Supply chain
The Tensor in the Haystack
Manipulating model weights to bias dependencies without breaking LLM coherence: model integrity as a software supply-chain risk.
Infrastructure · Disclosure
GLPI Agent: The No-CVE
How a default configuration can turn the compromise of an inventory server into domain compromise, even without a CVE.
Software · Supply chain
Supply Chain Necromancy
Reclaimed namespaces, JitPack coordinates and artifacts that stop being trustworthy when the name they depend on changes hands.
A practical rule
Operate.
Measure.
Recover.
A solution is not finished when it is purchased. It is finished when the team knows how to run it, can measure its state and has tested recovery.
03 / Track record
Security / Operations / Research
What I have built
Experience shapes judgement.
Three projects connected by one idea: carry risk all the way into operations, then feed what is learned back into practice.
2007
Information security
SG6
Turn requirements, risk and good practice into work a team can sustain.
2018
Consulting and operations
ITRES
Bring systems, communications, cybersecurity and data centre under a single service responsibility.
Today
Offensive research
LABS @ ITRES
Study how systems fail, publish the findings and turn them into reusable defensive measures.
04 / Contact
Decisions / Research / Conversation
Contact