About Carl Sampson

I’m an application security engineer with experience spanning application security, vulnerability research, and security tooling. I write about web vulnerabilities, Python, and the tools I build to make application security easier.

Places I’ve Worked

Presentations I’ve Done

My Interests

  • I started the OWASP Indianapolis Chapter in 2005 and continue to serve on the leadership team.
  • I curate a site called Appsec.fyi. It contains a collection of links related to application security. It has since evolved into generally anything technical that I’m interested in, broken down by subject.
  • I like to bike and run. Follow me on Strava.
  • I’ve done a 30k, several half-marathons, and more 5k’s than I can remember.