0+
Years Experience
AI & Cybersecurity
Drew
Founding Architect
Security Architect • 6+ Years Experience
Security architect and AI framework author with 6+ years of experience. Creator of @dcyfr/ai — an open-source TypeScript AI agent framework published on npm.
Security by DesignOpen Source by DefaultFull-Stack Developer
Background
I build secure systems and the agents that maintain them. 6 years in security architecture — a county government security team, then a global agency — certifying offices for ISO 27001, SOC 2, TISAX, and TPN, cutting global vulnerabilities by 23% and incident response times by 35%. Now I write the framework I wanted while doing that work.
How I work
Security is a design constraint, not a review gate. Controls go in with the architecture or they do not hold.
I ship what I use. @dcyfr/ai runs the agent swarm that maintains this site — the framework and the proof are the same codebase.
Trade-offs get stated out loud. Every decision here cost something. The posts say what.
GitHub Activity
A snapshot of my open source contributions and coding activity over the past year.
Current Experience
Founding Architect
DCYFR Labs
Jan 2025 → Present
- Authored and maintain @dcyfr/ai — a portable open-source TypeScript AI agent framework with plugin marketplace, multi-provider LLM support (OpenAI, Anthropic, Ollama, GitHub Copilot), and delegation framework. Published on npm.
- Designed and shipped plugin marketplace security architecture: trust scoring engine, TLP classification, Docker sandbox isolation, automated CVE scanning, and 8 adversarial scenario mitigations.
- Architected delegation framework v2 with reputation engine, HMAC identity verification, SLA contracts, and TLP clearance enforcement for secure multi-agent task routing.
- Maintains 20+ specialist AI agents, a workspace automation platform (30 scheduled jobs), Axiom observability integration, and a proprietary context engineering knowledge system.
Founding Engineer
GameShark Labs LLC
Apr 2026 → Present
- Founding engineer (contract) on the relaunch of GameShark — a 30-year gaming brand — as a digital content platform.
- Lead engineering on SharkVault, the flagship web product: Next.js and Supabase, covering authentication, entitlements, subscription billing, and content access control.
- Established the platform security baseline — row-level security policies, automated database invariant checks, and pre-launch hardening.
Principal Security Engineer
Monks
Jul 2023 → Present
- Led audits to certify offices for ISO 27001, SOC2, TISAX, and TPN, ensuring compliance with industry standards.
- Implemented technical controls, reducing global vulnerabilities by 23% and enhancing security posture.
- Streamlined incident response processes, achieving a 35% reduction in global response times.