// offensive security & appsec consultancy
Breaking and building secure systems
Yianna Paris is a security specialist, conference speaker and trainer. She focuses on adversarial thinking of web, LLM and agentic AI applications. Her research dives deep into embedded and radio connected devices.
// services
What I do
Offensive & Application Security
Adversarial thinking, vulnerability research and helping engineering teams build security into how they ship software.
Agentic AI & LLM Security
Securing systems that let models call tools and touch data — prompt injection, tool abuse, and where the guardrails go wrong.
Embedded & Radio
Research into connected devices — IoT, embedded software, software-defined radio and the protocols they whisper over.
Training & Speaking
Conference talks and hands-on training that turn security from a gate into a skill your team actually owns.
// the grimoire
Research & projects
Working notes from my research, and hands-on sessions you can open and run in the browser. Work in progress by design.
Web Reconnaissance
A methodology for mapping attack surface: domains, URLs, service enumeration, and automating the boring parts.
Projects
Incident tabletops and security workshops hosted right here — no accounts, no installs, nothing leaves your browser.
- Roaming Bites — The Promotion That Wasn’t Incident tabletop
- Roaming Bites — The Page That Was Ours Incident tabletop
- What does the internet know about you? Online footprint workshop
- What would make you believe it? Social engineering workshop
// contact
Got a system that needs breaking?
For consulting, training, or speaking — reach out and let's talk.