Assertion Labs Advisory

Security Engineering and Technical Diligence

Advisory is the service side of Assertion Labs. It covers security architecture, formal methods, AI system review, WebAssembly security, and technical diligence without blending those engagements into the research or project lines.

Get in Touch

Capabilities

Security Architecture
Review of authentication, authorization, IAM boundaries, threat models, and security-critical service design.
Formal Methods & Program Analysis
Applied use of static analysis, symbolic execution, and formal verification when ordinary testing leaves too much uncertainty.
AI System Review
Assessment of LLM-based workflows, agent boundaries, validation layers, and failure modes in production-facing systems.
WebAssembly Security
Security review of WebAssembly compilation targets, binary-level behavior, and runtime assumptions.
Technical Due Diligence
Independent assessment of architecture, security posture, engineering maturity, and technical risk for investors.
Deep Tech Advisory
Technical context for security, program analysis, formal methods, and defense-adjacent R&D.

Engagement types

Technical advisory
Ongoing input on architecture, security posture, research direction, and implementation risk.
Technical due diligence
Independent review for investors considering security, AI, developer tooling, or deep technical infrastructure companies.
Architecture review
Scoped assessment of a system design, codebase, or security boundary, with written findings and practical recommendations.
Research collaboration
Selective collaboration on program analysis, formal methods, WebAssembly, and security tooling.
Background

Senior Security Engineer at Amazon Web Services and visiting researcher at the IMDEA Software Institute. PhD in Computer Science, Northeastern University, 2026. Previously Senior Research Scientist at BitSight Technologies and Staff Scientist at Raytheon BBN Technologies, leading DARPA- and IARPA-funded programs for nine years. Research background in program analysis, WebAssembly security, and formal methods.

Full background and publication record →

Engagements are scoped carefully and taken selectively. If your problem is technically interesting and the stakes are real, get in touch.