Research
PhD work on agentic AI for autonomous VAPT in operational technology, plus independent research on AI agent security. Pathfinder AI, Clawbot, and the SLR paper live here.
→ research log// PhD candidate · DevSecOps compliance · agentic AI research
Building agentic AI
for the systems
that actually matter.
I research autonomous vulnerability assessment in operational technology environments — the unglamorous infrastructure that runs water treatment, power grids, and factory floors. Day to day I work in DevSecOps compliance at Darktrace, translating security frameworks into technical controls that engineering teams can actually ship.
Experience
DevSecOps compliance at Darktrace, MSP security work at Bunker, and digital forensics experience with CFL. GRC fluency across ISO 27001, SOC 2, and Cyber Essentials.
→ track recordProjects
Independent work — a multi-PLC OT testbed, an OpenAI Model Craft Challenge submission (51% loss reduction over baseline), and writing on agentic systems.
→ portfolio// flagship
Pathfinder AI
An agentic VAPT framework with the PEER lifecycle and ORDA control loop. Local-first (Ollama + DeepSeek R1 14B), governed and telemetered, verified against a live ICS testbed.
// paperAgentic and Generative AI for Autonomous VAPT
Co-authored systematic analysis. Targeted at Computers & Security.
// researchClawbot — agent insider threat
How a locally-deployed AI agent becomes an insider threat vector through prompt manipulation alone.