Hi, I'm
Omar Tsai
I research security, build AI systems, and wrangle data — sometimes all in the same week. I write about what I learn and ship side projects when the mood strikes.
Selected achievements
-
GraphQLer creator & maintainer
Dependency-aware GraphQL security testing. Open source, with 170+ GitHub stars.
-
OWASP contributor
Contributed GraphQL security-testing guidance to the Web Security Testing Guide.
-
GitHub Spec Kit contributor
Added Oh My Pi support, including CLI integration, documentation, and tests.
-
Published at ACM CIKM 2024
Co-authored XploitSQL, combining language models and reinforcement learning for SQL-injection generation.
What I work on
Cybersecurity
Vulnerability research, pen testing, and building tools that find what attackers find first.
AI & Machine Learning
Designing, training, and evaluating models — from classical ML to LLM-powered systems.
Data Science
Turning raw data into insight. Statistical analysis, visualisation, and reproducible research.
Data Engineering
Pipelines, warehouses, and the infrastructure that keeps data clean and flowing.
Hardware
Embedded systems, low-level programming, and the occasional soldering iron.
Recent posts
All posts →
Featured projects
All projects →
GraphQLer
The only dependency-aware GraphQL API security testing tool. Automatically generates valid queries and mutations, resolves object dependencies, and detects vulnerabilities including IDOR.
Safe Browsing
A browser extension that scans every website you visit in real time and gives you an instant risk verdict — Safe, Suspicious, or Malicious — with phishing detection, typosquatting checks, and optional self-hosted server support.
Research
See more →Active research areas across API security, LLM-assisted testing, embedded security, and data-driven threat intelligence. Always open to comparing notes.