Security software engineer in Naples, Italy. I build open-source tools for cloud and Kubernetes security, and I measure whether they are right. · a3thinker.it · LinkedIn
Repository · Docs · Live demo
An attack-path engine in Go. It fails the pull request that opens a route from the internet to sensitive data, and checks its own scores against what AWS actually allows. Apache-2.0.
Measuring prompt-injection defences against policy-conformant attacks. Apache-2.0.
- Model Context Protocol Go SDK (official, maintained with Google): OAuth fixes in the client and the
auth/extauthhandlers, and a conformance scenario (#1418, #1419, #1432, #1433, #1465) - Falco (CNCF): detection of
sitecustomize/usercustomizepersistence, MITRE ATT&CK T1546.018 (falcosecurity/rules#392)

