Adam Shostack
President at Oxford University Press Journal of Cybersecurity
Seattle, Washington, United States
Summary
👤
Senior🎓
Top SchoolAdam Shostack is a veteran security engineering leader and entrepreneur with over a decade of experience driving threat modeling, usable security, and secure-by-design practices across startups and Microsoft. As President of Shostack + Associates and an affiliate professor, he delivers high-impact training and tools—he shipped both software and a card game to make threat modeling practical for engineers. A prolific author and conference reviewer, his books and roles at Black Hat, OWASP, and academia reflect deep influence on industry standards (he helped create CVE and drove the Autorun fix at Microsoft). He blends systems architecture, human-centered design, and privacy work, advising accelerators and security product teams while mentoring founders. Known for turning research into tangible developer tools and frameworks, he favors serious games and pragmatic processes to surface security risks early.
10 years of coding experience
15 years of employment as a software developer
Simon's Rock College of BardBard College at Simon's Rock
Github Skills (83)
security10
threat-model10
owasp10
threat-modeling10
application-security10
pandoc10
converter10
markdown9
markup-language9
table-of-contents9
commonmark9
haskell9
markup9
bdd8
vscode8
Programming languages (19)
Github contributions (5)
adamshostack/DFD3
Nov 2017 - Oct 2021
Contributions:1 review, 18 commits, 2 PRs in 4 years
adamshostack/4QuestionFrame
Oct 2020 - Jul 2022
Shostack's 4 Question Frame for Threat Modeling
Contributions:8 commits, 14 pushes, 1 branch in 1 year 9 months
threat-modeling
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.