Most of my work lives around wireless networks, web applications, APIs, Android, and cloud environments. I'm OSCP, OSWP, and Burp Suite Certified Practitioner certified, with time spent in consulting, vulnerability validation, and bug bounty triage.
Previously at Gotham Digital Science / Stroz Friedberg / Aon / LevelBlue, testing systems that were not supposed to fail.
Lately I've been focused on agentic AI, physical security, automotive systems, and anything with signals, locks, or attack surfaces. My curiosity tends to drift toward the places where software meets the real world.
I stay in scope, but I like finding where the scope's assumptions break.
Off-hours: Morse code, dits and dahs, and occasionally blinking messages into the dark for no reason other than it still works.
For consulting or security work: hire@falasi.net
Some things I've shipped: an were accepted BCheck in PortSwigger's official repository, and burp-auto-gql.