Gal Weizman
Sr Principal Security Researcher at Palo Alto Networks
Tel-Aviv District, Israel
Summary
🤩
Rockstar🎓
Top SchoolGal Weizman is a Sr. Principal Security Researcher with a decade of deep expertise in browser JavaScript security, ship-ready engineering, and open-source innovation. He invented Snow JS, helped integrate and maintain LavaMoat, and played a pivotal role securing the MetaMask extension and client-side supply-chain protections used across the ecosystem. His work spans practical sandboxing (scuttling globalThis, lockdown integration) to standards advocacy—he authored the RIC proposal in WICG—bridging low-level research with production tooling. A former Unit 8200 cyber lead, he combines offensive security insight with product-focused delivery, and has a track record of finding real-world CVEs while building patented defenses. Based in Tel Aviv, he now leads security research at Palo Alto Networks, continuing to push browser security forward.
10 years of coding experience
11 years of employment as a software developer
High School, Computer Science, 98, High School, Computer Science, 98 at Amirim High School
English, Hebrew, Spanish
Github Skills (18)
sandbox10
javascript10
browser-extension10
extension-functions10
chrome-extension10
security10
extension-methods10
build-automation10
codesandbox10
opera-extension10
webextension10
nodejs10
c-extension10
chrome9
browserify8
Programming languages (7)
Github contributions (5)
LavaMoat/LavaMoat
Jun 2022 - Jan 2023
tools for sandboxing your dependency graph
Role in this project:
Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:253 reviews, 63 commits, 110 PRs in 7 months
Contributions summary:Gal's contributions center on enhancing the security and functionality of the LavaMoat project. They implemented features to scuttle `globalThis` properties, improving the sandboxing capabilities of the dependency graph tools. Furthermore, the user made significant code changes to integrate lockdown.umd.js and improve its performance. They also addressed logic issues and incorporated improvements to the build process, indicating a focus on security and core functionality.
sandboxingblockstackdependency-grapharweavegraph
MetaMask/metamask-extension
Nov 2022 - Jan 2023
:globe_with_meridians: :electric_plug: The MetaMask browser extension enables browsing Ethereum blockchain enabled websites
Role in this project:Full-stack Developer
Full-stack DeveloperContributions:114 reviews, 9 commits, 110 PRs in 2 months
Contributions summary:Gal primarily contributed to the MetaMask extension codebase, focusing on features related to LavaMoat integration and security enhancements. Their work involved modifying build processes, updating dependencies, and adding new security features like scuttling protection. They also made changes to HTML files, suggesting work on UI elements, specifically integrating and enabling LavaMoat features across the extension.
dapp-developersethereumweb3bravemetamask
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.