about

I started out in explosive ordnance disposal, where the job is to understand how a device works well enough to take it apart without setting it off. That habit stuck. These days I point it at software.

My focus is AI and application security: how AI agents and coding assistants handle untrusted input, where their trust boundaries leak, and what an attacker can make them do. I report what I find through coordinated disclosure and bug bounty programs, and I only publish once a fix is out and the vendor has cleared it.

If you run a program and want to talk, or you found something on this site that is wrong, email rendersafe.dev@proton.me.