Argemma is a security engineering consulting practice run by Kelby Ludwig.

I work with technology startups who need hands-on engineering and security expertise. My goal is to enable your startup to ship code, at high-velocity, while having increased confidence in the security of your product.

My project-based work is typically structured around the following:

However, I also support teams with longer-term engagements. This can include much of the above but can also include:

• Triaging inbound vulnerability and bug bounty reports
• Handling security questionnaires from your sales pipeline
• Ad-hoc code review for in-flight features
• Providing proactive security guidance on product roadmaps

The above isn't comprehensive so if you have a particular need that you don't see covered, please reach out.

Get in touch

Contact me at hello@ on this domain with a brief description of what I can do for you.

About Kelby

I've worked in software security for over a decade. My career began in application security and consulting at Praetorian and Duo Security, and I most recently worked as a security engineer at Stripe working on authorization and secrets management.

Over the years I have found widespread flaws in SAML libraries, cryptography flaws in JWT libraries, and led an overhaul of incident-prone secrets management infrastructure. I also occasionally write about security, engineering, and cryptography on the Argemma blog and my personal blog.

I hold a B.S. in Computer Science from the University of Texas at Austin.