Hackbot R&D

I’m a researcher working at the intersection of artificial intelligence and computer security. I work at Dreadnode training and evaluating the hacking capabilities of agents. I’ll be working in this field until we see hacking’s move 37.

RL Needed LLMs Because Agency Requires Priors

We tried RL once. It didn’t work. I’m confident it will this time.

GPT-5 is Good, Actually: The Agony and Ecstasy of Public Benchmarks

An attempt to explain why benchmarks are either bad or secret, and why the bar charts don’t matter so much.

The Religious Devotion of Haskell

A brief(ish) anecdote and investigation into the religious devotion of Haskell programmers.

The Input Sanitization Perspective on Prompt Injection

So, you mixed user input and instructions.

Deep Reinforcement Learning for Security: Toward an Autonomous Pentesting Agent

A manifesto on RL in cybersecurity, from when deep RL was the thing.

An ML Eng's Review of OSCP

Because you shouldn’t try and automate anything you can’t do yourself.