Alessio Santoru
Product Engineer
Milan, Lombardy, Italy
Summary
👤
Senior🎓
Top SchoolAlessio Santoru is a Product Engineer with nine years of experience specializing in offensive security, research, and product security, currently working on security at AWS from Milan. He blends hands-on engineering with threat-focused research, improving product resilience through pragmatic tooling and vulnerability-driven design. His open-source work, including enhancements to the shcheck security-header scanner, shows attention to real-world attack surface details like header caching, cookies, proxy handling, and flexible TLS options. Trained across Politechnika Krakowska and Università degli Studi di Perugia, he brings a cross-disciplinary academic background to applied security challenges. Colleagues know him for turning security research into concrete, production-ready features that make products measurably safer.
9 years of coding experience
Laurea, Laurea at Università degli Studi di PerugiaPolitechnika Krakowska im. Tadeusza Kościuszki
English, Italian
Github Skills (9)
http10
network-security10
urllib10
python10
headers10
security10
tls139
ssl9
tls129
Programming languages (7)
Github contributions (5)
santoru/shcheck
May 2017 - Nov 2022
A basic tool to check security headers of a website
Role in this project:
Security Engineer
Security EngineerContributions:16 releases, 10 reviews, 81 commits in 5 years 7 months
Contributions summary:Alessio primarily contributed to enhancing the security aspects of the `shcheck` tool. Their work involved adding features such as information disclosure header checks, the ability to disable SSL certificate validation, and the option to utilize GET requests. Additionally, they implemented support for caching headers and expanded client header capabilities to increase functionality. The user also made improvements to the tool's output and added support for cookies and proxy configurations.
securityheaders
santoru/filewatcher
Jul 2017 - Mar 2021
A simple auditing utility for macOS
Contributions:27 commits, 1 push in 3 years 9 months
macosauditingmonitoringmalwarefilesystem
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.