Thibault Koechlin is a security-focused CTO with 13 years of hands-on experience building and hardening web infrastructure and open-source tooling from Nantes, France. He co-created and maintained NAXSI, a high-performance WAF for NGINX, and has deep backend and security engineering contributions to notable projects like CrowdSec and Snuffleupagus. His work spans product leadership, R&D and DevOps—combining fuzzing/build tooling, secure configuration, and virtual-patching techniques to mitigate real-world exploits. As CrowdSec’s technical leader since 2020, he blends strategic product direction with continued low-level code and security fixes, demonstrating a rare mix of executive ownership and practical exploit-mitigation craftsmanship.
CrowdSec - the open-source and participative security solution offering crowdsourced protection against malicious IPs and access to the most advanced real-world CTI.
Role in this project:
Back-end Developer
Contributions:2 releases, 857 reviews, 502 commits in 2 years 8 months
Contributions summary:Thibault was involved in the initial import of code and made subsequent updates to the CrowdSec project. The commits focus on the `cmd/crowdsec-cli/backup-restore.go` file, suggesting a focus on the implementation of the backup and restore functionality. The user made significant changes in the configuration of the application and its internal logic.
NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX
Role in this project:
Back-end & DevOps Engineer
Contributions:11 releases, 46 commits, 71 PRs in 5 years
Contributions summary:Thibault contributed to the integration of fuzzing tools, including building the fuzzing environment and incorporating AFL (American Fuzzy Lop). They made changes to the build process and configuration files to support fuzzing. Additionally, the user addressed code issues, including removing unreachable code and fixing encoding issues, demonstrating expertise in code quality and optimization. They also added a rule to be triggered when no main rules are present.
nginxwafnaxsiperformancerules
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.