Values

Things I believe and am willing to say publicly. This page is deliberately here. People who align will connect deeper; people who don't will self-select out. Both outcomes are fine.

Open source is infrastructure

The security industry runs on open source. OWASP, open standards, community-built tooling — these aren't charitable contributions, they're the foundation. I contribute where I can and advocate loudly for funding and supporting the commons that everyone depends on.

Security as enablement, not gatekeeping

The security team that says 'no' to everything protects nothing. The goal is to help developers build things that are secure by default — to make the right thing the easy thing. Friction for friction's sake is not a security strategy.

AI optimism, eyes open

I think AI is genuinely transformative and mostly for good. I also think the security implications are serious and underappreciated. Both things are true. The answer isn't to panic or to ignore it — it's to do the work of understanding the actual risks and building actual defenses.

Developer empowerment

Developers are the last line of defense in most organisations. They're also the ones who can build security in from the start. The security industry has spent too long treating developers as the problem. They're the solution.

Privacy as a human right

Not a compliance checkbox. Not a product feature. A right. Surveillance capitalism is real and harmful. Privacy-by-design matters. I'd rather build something that respects people than build something that exploits them.

A free press is not negotiable

Journalists are being killed in record numbers. In Gaza, in Ukraine, in Mexico, in silence. A free press is not a luxury or a Western affectation — it's how power is held to account. Threatening, jailing, or killing journalists is how authoritarianism cements itself. I support press freedom organisations, I read primary sources, and I say this plainly: stop killing journalists.

Palestine

The occupation is illegal under international law. The collective punishment of civilians is a war crime. Saying so is not antisemitism — conflating the two is a rhetorical trick, and I won't play along. This is a political position I hold publicly and without apology.