Notes on security engineering, AI/ML research, and things I've learned.
I fine-tuned a 125M parameter RoBERTa model on 234K CVE descriptions to classify vulnerabilities into 205 CWE categories. It hits 87.4% accuracy and matches models 64x its size on CTI-Bench.
Read articleYou're not the first startup to make these mistakes. Here's what breaks, why it breaks, and how to fix it before something bad happens.
Read articleYou're a US startup selling to European customers. Here's what GDPR actually requires, minus the lawyer-speak and panic.
Read articleYou've done the work. Now here's how to not screw up the audit itself. Real advice from someone who's been through it.
Read articleThe exact GitHub Actions pipeline I deploy for Series A-C clients. No fluff, just the tools that work without blocking deployment.
Read articleForget the 200-point enterprise questionnaires. If you are <20 people, this is the only checklist you need.
Read articleSOC2 is American English. ISO 27001 is British English. Here is how to choose the right framework based on your sales strategy.
Read articleGitHub Copilot wrote 40% of your codebase. ChatGPT debugged the rest. Now what? A practical guide to AI security that won't slow you down.
Read article