Information Security @ UIT · building useful autonomy without accidentally inventing Skynet-as-a-Service.
I'm Van Truong — a security builder who likes giving AI agents tools, constraints, and a reason to distrust their first answer.
I started with offensive security: breaking web applications, studying how systems fail, and automating the repetitive parts. Now I explore the other side of the problem — building autonomous systems that can investigate, reason, and act without becoming the next security incident.
What interests me most is not how intelligent an agent sounds, but whether it can show its evidence, stay inside scope, and stop when it is uncertain.
- autonomous security workflows that do more than chat
- tool use, memory, permissions, and agent guardrails
- turning offensive knowledge into safer automation
- making AI say “I don't know” before production says “incident”
agent = Agent(
tools="useful",
permissions="minimal",
evidence="required",
human_override=True,
sudo=False,
)Working rules: evidence before confidence · autonomy should be reversible · humans keep the final veto · if the YAML works on the first try, inspect it again.
Python · TypeScript · Linux · Docker · LangGraph · MCP · Web Security · Security Automation
