I build AI agents for security, and the tools I need along the way.
Tech Lead at RedCarbon, and in the open I build Argus. I write mostly Go, and I share everything I learn.
That's me, mid-talkBuilding
All projectsWhat I'm building in the open
Argus
Open-source AI security review agent written in Go. It runs real scanners (Semgrep, Gitleaks, OSV-Scanner) and reasons about their findings like an analyst would, or serves them over MCP as a toolbox for the AI you already use.
- Semgrep, Gitleaks and OSV-Scanner, run as tools
- In the terminal, on pull requests, over MCP
- Go, Apache 2.0, early and honest about it
docker run -it -v argus-data:/data -p 8080:8080 ghcr.io/argusappsec/argusWriting
All 14 postsNotes from the work
- 14 Oct 2026AI Agent Sessions Are a Data Store Nobody DesignedAI and security · 11 min
- 30 Jul 2026Introducing Argus: The Code Security Colleague Your Team Doesn't HaveAI and security · 17 min
- 8 Jul 2026I Built a Tool I Don't UseEngineering and Go · 9 min
- 17 Apr 2026Stop Prompting. Start Thinking.AI and security · 9 min
On stage
32 talks and appearancesWhat you learn, you must share.
- 1 NovNextSecuring Go for Production: Best Practices, Supply Chain, TestingGoLab 2026 · Bologna
- 19 NovNextAI Won't Design Your System. You Have To.reactjsday 2026 · Verona
- 26 Sep2026Il security engineer che già AIComeToCode 2026 · Pignola
Spoken at ComeToCode, GoLab, WeAreDevelopers World Congress, KCD Italy, DevOps Day
Invite me to speakCommunity
Open source, in person.
Schrodinger HatThe non-profit open source association I co-founded and run. 20k+ people reached, 100+ speakers at events across Europe.
What we organise
- Open Source Day4 editions, 2023 to 2026, in Florence.
- Meetups10 since 2023, in Milan, Florence and Verona. The latest: SH meets Mollie.
Newsletter
One email a month
A monthly digest of everything I write, build and speak about.