Security findings were scattered across tools, and sharing them with clients meant another manually assembled report.
I built BakerStreet to connect testing, findings, and assessment history, and Sherlock to run assessments remotely. Clients can trigger authenticated scans from their development pipelines and act on the results.
Owned by Tuik Security GroupAvailable to Tuik clients
Omenexa
02
Which threats affect your systems?
A security warning was already public, but the team that needed it never saw it. I started asking how we could connect those warnings to the technology a company actually uses.
I’m building Omenexa to combine external discovery with threat monitoring, including technology a team may not know it depends on.
Owned by Tuik Security GroupIn development
More projects.
Personal experiments through Chaveriat Labs, alongside tools I’ve built for Tuik.
03 // Breach intelligence
ProjectMariana
Find exposed company data in breach collections and across the deep and dark web, so teams can investigate and act.
Turn your photos and ideas into art for compatible Samsung Frame televisions. A mobile app with optional AI artwork creation.
Studio: Chaveriat Labs, · In development
05 // Application security
BelchHog
Automate web application security testing through an API, with structured findings that fit into your workflow.
Owned by Tuik Security Group, · In development
About Alex
Why I keep exploring.
Alex Chaveriat // Silk
I wanted to build a company so I could do fascinating things with fascinating people.
I love finding out what someone can’t stop thinking about. I start asking questions. One detail leads to another, and suddenly we’re looking at the problem differently. My favorite part is when they start throwing ideas back.
Along the way, I’ve built and led security teams and overseen thousands of security assessments. I helped pioneer industrial control protocol fuzzing and established application security testing programs at General Electric and the FAA.
I’ve also picked up three Black Badges: one from DEF CON and two from GrrCON. After four wins at DarkNet, DEF CON’s largest contest at the time, they put me to work on the team, running its final challenge. These days, I help lead DEF CON’s photo and video team.
After RootOccasional notes from Alex
The thinking behind the work.
Stories about finding the real problem, trying an idea, and learning from what happens, with questions to bring to your own work.
Start here // Dispatch 001
Good technical work doesn’t speak for itself.
What changed when I got as curious about the people as I was about the exploit.