About
Security researcher and developer specializing in web application security.
I'm a 22-year-old security researcher and developer from Feldkirch, Austria. I started programming when I was 13 and was nearly coding full time alongside school, always curious about how things break as much as how they work. After finishing my Matura at HAK Feldkirch I went straight into working full time rather than university. I learned more from reading source code and finding real vulnerabilities than any curriculum could have taught me.
I founded Sorpus GmbH, where I focus on authorized bug bounty research and coordinated vulnerability disclosure. ShipSecure was an earlier project; its security audit work now lives under Sorpus.
Outside of security, I care about open source, privacy, and self-hosting. I run NixOS on everything, self-host most of my infrastructure, and have strong opinions about keyboards.
This site hosts my security vulnerability writeups and research. All vulnerabilities documented here have been responsibly disclosed and patched before publication.