Cybersecurity software engineer and security researcher. I build open-source security tools. - website: a3thinker.it

PerspectiveGraph - an attack-path engine in Go that fails the pull request opening a route from the internet to a sensitive asset, and measures whether its own risk scores hold up. Apache-2.0 · live demo

Geryon - measuring prompt-injection defences against policy-conformant attacks. Apache-2.0.

The Falco Project (CNCF): cloud-native runtime security

• falcosecurity/rules#392: extended the Modify Python Startup Hook File rule to detect sitecustomize/usercustomize persistence (MITRE ATT&CK T1546.018)

Model Context Protocol Go SDK: the official Go SDK for MCP servers and clients

• #1418: OAuth: re-authorize when the access token expires without a refresh token
• #1419: OAuth: reuse the dynamically registered client across authorizations
• #1432: auth/extauth: fix token source lifetime and concurrent access in the handlers
• #1433: conformance: run the OAuth client credentials scenario