Chris Cornutt

Whitefish, Montana, United States
email-iconphone-icongithub-logolinkedin-logotwitter-logostackoverflow-logofacebook-logo
Join Prog.AI to see contacts
email-iconphone-icongithub-logolinkedin-logotwitter-logostackoverflow-logofacebook-logo
Join Prog.AI to see contacts

Summary

🤩
Rockstar
Chris Cornutt is a Staff Application Security Engineer with 16 years of hands-on web and application security experience, blending a deep PHP/web-development pedigree with product security leadership at companies like GitHub and Shopify. He builds secure systems and scalable programs—spanning code review, threat modeling, security education, and program-level planning—while also authoring developer resources such as PHPDeveloper.org and the php.ini scanner iniscan. Chris has a proven track record of translating developer-friendly security practices into measurable organizational outcomes, having led security education initiatives at Cisco and guided Product Security planning at GitHub. Based in Whitefish, Montana, he pairs pragmatic engineering with community impact—speaking at major conferences, contributing to open source projects like Joind.in, and running Websec.io to help developers adopt more security-conscious workflows.
code16 years of coding experience
github-logo-circle

Github Skills (6)

command-line-interface10
php10
object-oriented-programming10
security-scan10
command-line10
unit-test8

Programming languages (5)

TypeScriptCSSJavaScriptPHPPython

Github contributions (5)

github-logo-circle
psecio/iniscan

Oct 2013 - Feb 2018

A php.ini scanner for best security practices
Role in this project:
userBack-end Developer
Contributions:214 commits, 9 PRs, 16 pushes in 4 years 4 months
Contributions summary:Chris primarily focused on building the core functionality of the php.ini scanner. They started by creating the initial `Scan` class and progressively fleshed it out with methods for setting and retrieving file paths and rule configurations. The user then added key classes, including `Operation` and `Rule`, and implemented operations for checking settings, like "equals" and "isset." Furthermore, they integrated custom rule creation and a command-line interface for executing scans.
securityscannerphpconfigurationini
psecio/invoke

Apr 2015 - Aug 2018

Invoke: Route Authentication/Authorization Management
Contributions:51 commits, 1 PR, 37 pushes in 3 years 4 months
authenticationauthorization
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.
Request Free Trial