Calif is a security firm from California, trying to keep the Internet together by occasionally taking it apart.
Who we serve
Developers or operators of critical digital infrastructure.
Non-profit organizations, hospitals, and the world's forces for good.
Team
Leadership
Thai Duong /thaidn
Thai was born in Saigon and grew up on the Internet. He has spent
most of his life asking computers impolite questions. For 12 years,
he led security and cryptography work at Google — breaking and
defending Gmail, Android, and YouTube, and co-creating Google Tink
and Project Wycheproof. Earlier, he helped discover the SSL
vulnerabilities affectionately known as BEAST, CRIME, and POODLE
— a trilogy no one asked for, but everyone patched.
An Trinh
An is a research-driven penetration tester with a suspicious number
of maximum bounties from PayPal, Netflix, and Walmart. He maintains
a 100% success rate in red teaming engagements — a statistic both
reassuring and slightly alarming. An has spoken at Black Hat
Europe, ZeroNights St. Petersburg, and BSides Singapore, usually
about things that shouldn't have worked but did.
Advisors
Michał Zalewski /lcamtuf
Michał wrote afl-fuzz, the tool that finds bugs faster than most
people can deny them. A security researcher, author, and longtime
breaker of things, he's contributed more to the art of crashing
software than most malware ever did. Previously at Google and Snap,
he now divides his time between writing, research, and inventing
new ways to prepare for the inevitable apocalypse — irresponsibly
disclosed, of course.
Parisa Tabriz
Parisa runs Chrome at Google and leads Project Zero, a small band
of wannabe hackers who spend their days discovering vulnerabilities
and their nights trying to name them dramatically. Officially,
she's Google's "Security Princess." Unofficially, she's the
reason your browser updates while you sleep. Beyond Google, she's
lectured at Harvard, advised the White House, and occasionally
translates hacker-speak for Hollywood screenwriters.