all code review

Everything I've published,
in one feed.

2 posts across writeups, research, and technical deep-dives. Filter by tag.

2 posts
2025.08.05
ResearchCPGStatic Analysis

Understanding Code Property Graphs

Why AST, CFG, and PDG each fall short for security review, and how Code Property Graphs unify them into one queryable structure, with an intro to Joern.

22 min
2025.08.02
ResearchSASTStatic Analysis

Code auditing 101

A tour of code auditing fundamentals: manual review vs SAST, taint analysis, sink-to-source vs source-to-sink, and picking a SAST tool people will use.

21 min
>_ esc