Calif is a security firm from California, trying to keep the Internet together by occasionally taking it apart.

Who we serve

red-teaming

Developers or operators of critical digital infrastructure.

digital-forensics

Non-profit organizations, hospitals, and the world's forces for good.

Team

Leadership

thai

Thai Duong /thaidn

Thai was born in Saigon and grew up on the Internet. He has spent most of his life asking computers impolite questions. For 12 years, he led security and cryptography work at Google — breaking and defending Gmail, Android, and YouTube, and co-creating Google Tink and Project Wycheproof. Earlier, he helped discover the SSL vulnerabilities affectionately known as BEAST, CRIME, and POODLE — a trilogy no one asked for, but everyone patched.
an

An Trinh

An is a research-driven penetration tester with a suspicious number of maximum bounties from PayPal, Netflix, and Walmart. He maintains a 100% success rate in red teaming engagements — a statistic both reassuring and slightly alarming. An has spoken at Black Hat Europe, ZeroNights St. Petersburg, and BSides Singapore, usually about things that shouldn't have worked but did.

Advisors

lcamtuf

Michał Zalewski /lcamtuf

Michał wrote afl-fuzz, the tool that finds bugs faster than most people can deny them. A security researcher, author, and longtime breaker of things, he's contributed more to the art of crashing software than most malware ever did. Previously at Google and Snap, he now divides his time between writing, research, and inventing new ways to prepare for the inevitable apocalypse — irresponsibly disclosed, of course.
parisa

Parisa Tabriz

Parisa runs Chrome at Google and leads Project Zero, a small band of wannabe hackers who spend their days discovering vulnerabilities and their nights trying to name them dramatically. Officially, she's Google's "Security Princess." Unofficially, she's the reason your browser updates while you sleep. Beyond Google, she's lectured at Harvard, advised the White House, and occasionally translates hacker-speak for Hollywood screenwriters.