reddux

I'm teaching myself security research the way I learn everything else. By doing it. Most of my work happens on authorized bug bounty and disclosure programs, studying how web applications actually break, chasing down input validation and logic flaws, and writing up findings the right way.

I also run Meridian, moderation and safety infrastructure for online communities built around protecting kids. If you want to see what that looks like or hear more, visit mrdn.cc. Day to day that's fullstack development, running servers, heavy automation, and AI/ML systems. Beyond that I build whatever's interesting. Tools, prototypes, experiments, the occasional thing that ships.