Matteo Pace
Software Engineer at Coraza Technologies
Greater Turin Metropolitan Area Italy
Summary
🤩
Rockstar🎓
Top SchoolMatteo Pace is a software engineer with six years of experience specializing in cloud-native, service-mesh and application security, currently building Zero Trust capabilities at Tetrate using Envoy, Istio and Wasm. He is a maintainer and active contributor to OWASP Coraza WAF and a developer for the OWASP ModSecurity Core Rule Set, focusing on extending WAF core functionality and improving test coverage. His master’s thesis and practical work blend research and engineering: he implemented a C++ WebAssembly WAF module integrated with Istio to enforce NIST-style Zero Trust controls. Matteo’s contributions include implementing nuanced IP matching parsing and dataset-driven tests for Coraza, demonstrating attention to defensive, testable security code. Based in the Greater Turin area, he pairs rigorous academic credentials (Politecnico di Torino, MSc with top marks) with hands-on open-source stewardship. Colleagues describe him as a pragmatic security engineer who bridges low-level protocol work with cloud-native deployment patterns.
5 years of coding experience
Liceo Scientifico "Maria Curie"Master's degree, Computer Engineering, Cybersecurity, 110/110, Master's degree, Computer Engineering, Cybersecurity, 110/110 at Politecnico di Torino
English, Italian
Github Skills (7)
go10
modsecurity10
waf10
http9
testing9
owasp8
golang7
Programming languages (8)
Github contributions (5)
corazawaf/coraza
Aug 2022 - Jan 2023
OWASP Coraza WAF is a golang modsecurity compatible web application firewall library
Role in this project:
Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:3 releases, 288 reviews, 69 commits in 5 months
Contributions summary:Matteo primarily contributed to the implementation of the `ipMatchFromDataset` operator for the Coraza WAF library. They focused on adding parsing capabilities for `ipMatchFromFile`, creating tests with varying datasets, and integrating these features. The user also addressed code review comments, refactored tests, and added features for the http-server example, including response header handling. The commits indicate a focus on extending core WAF functionality and improving the test coverage for the library.
web-applicationwafcorazasession-cookieweb-application-firewall
M4tteoP/coreruleset
Jul 2022 - Jan 2024
OWASP ModSecurity Core Rule Set (Official Repository)
Contributions:79 pushes, 20 branches in 1 year 6 months
security-toolscore-rule-setrulesecurityowasp
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.