Hi, I'm
Omar Tsai
I research security, build AI systems, and wrangle data — sometimes all in the same week. I write about what I learn and ship side projects when the mood strikes.
What I work on
Cybersecurity
Vulnerability research, pen testing, and building tools that find what attackers find first.
AI & Machine Learning
Designing, training, and evaluating models — from classical ML to LLM-powered systems.
Data Science
Turning raw data into insight. Statistical analysis, visualisation, and reproducible research.
Data Engineering
Pipelines, warehouses, and the infrastructure that keeps data clean and flowing.
Hardware
Embedded systems, low-level programming, and the occasional soldering iron.
Recent posts
All posts →Featured projects
All projects →
GraphQLer
The only dependency-aware GraphQL API security testing tool. Automatically generates valid queries and mutations, resolves object dependencies, and detects vulnerabilities including IDOR.
Research
See more →Active research areas across API security, LLM-assisted testing, embedded security, and data-driven threat intelligence. Always open to comparing notes.