Workshops, Talks, Publications

I speak and write about systems of all shapes and sizes.

Practical threat modelling for engineering teams

Lightweight, repeatable threat modelling you can actually run in sprint cadence. We cut jargon, pick a fit-for-purpose method, and get to work quickly. Read about it here.

Takeaways: initial model (only for workshops), playbook, templates, 30-day plan to make it stick.
Formats: 45–90min talk, ~3h half-day, 6–8h full-day (hands-on)

Book this workshop

ISMS & SSDLC that you can work with

Let’s turn “we should do security” into a minimal ISMS and an SSDLC that actually holds up in practice. We map controls to your workflows (code, CI/CD, infra) and prove it with artifacts. Read about it here.

Takeaways: control set, CI/CD hooks for evidence (workshop only), audit-ready checklists.
Formats: 45–90min talk, ~3h half-day, 6–8h full-day (hands-on)

Book this workshop

Funding & buyer readiness

What VCs, acquirers, and enterprise buyers actually check, and how to be ready to answer. Architecture narrative, risk posture, and processes that actually give you something in return. Read about it here.

Takeaways: a DD checklist, a clean architecture one-pager, a 30-day prep plan including process refinements (workshop only).
Formats: 45–90min talk, ~3h half-day, 6–8h full-day (hands-on)

Book this workshop

Rates

Community events: travel-only (free if remote)
Corporate talks (45–60 min): 1,900€–2,400€
Corporate talks (75–90 min): 2,400€–2,800€
Half-day workshop (2–4h): 2,500€–3,000€
Full-day workshop (6–8h): 4,200€–4,800€
Prep and post is included
Remote workshops receive a 20% discount

Custom workshops are available; tell me your team’s goals and I’ll tell you if I can help you.

AI Architecture Katas: Learning by Building Small Models in Plain Python

EuroPython, 2026
A talk about how to build your own small but capable models for larning, and how to approach the big and scary world of AI/LLM research. Also to be given at KI Navigator.

Type Systems You Might Not Know (But Will Love)

WeAreDevelopers World Congress Europe, 2026
A tour through beautiful but lesser-known type systems.

Von der Cloud ins Rack – Wie Netzautomatisierung souveräne RZ-Umgebungen ermöglicht

Rack & Stack 2026
A German talk on high fidelity network automation to drive the adoption of sovereign data infrastructure.

Network Automation in the Modern Age

DKNOG, 2026
A talk about the future of network automation, and how to facilitate having your own model of the world.

Watch →

gt4llm – Software Development with LLMs in Glamorous Toolkit

European Smalltalk User Group, 2024
An overview of LLM integration into Glamorous Toolkit, with a focus on reproducibility and development workflows.

Watch →

gt4python – Working with Python inside Glamorous Toolkit

European Smalltalk User Group, 2024
A talk on Python inside Glamorous Toolkit.

Watch →

gt4atproto – A Programmable Environment for Social Media

European Smalltalk User Group, 2023
A demonstration of working with the AT Protocol inside Glamorous Toolkit, emphasizing customization and tooling.

Watch →

Implementing an IDE in GT

European Smalltalk User Group, 2022
A talk on building an IDE for Carp inside Glamorous Toolkit.

Watch →

Brainfuck, Carp, Macros, and Futamura Projections

LambdaLounge, 2021
A technical presentation connecting minimal languages, metaprogramming, and interpreter folding techniques.

Watch →

All I Have is a Hammer, Now Give Me All Your Nails!

EnthusiastiCon, 2020
A short talk on abstractions as axioms.

Watch →

Programming Languages and Trust

Datengarten 96
On compilers, interpreters, and safety.

Watch →

Automate Yourself Within Six Months

DeNOG, 2019 (w/ Christian Dieckhoff)
A retrospective on automating an ISP’s network infrastructure.

Watch →

Abstractions! How Do I Even?

EnthusiastiCon, 2019
A short reflection on abstractions and philosophy.

Watch →

Carp—A Language for the 21st Century

clojuTRE, 2018
An introduction to Carp. In other forms also given at EnthusiastiCon 2018, at Localhost #15 (invited by the Recurse Center), at CurryOn 2019, and at the Clojure Meetup Berlin.

Watch →

Efficient Module-Level Dynamic Analysis for Dynamic Languages with Module Recontextualization

ESEC/FSE 2021 — Distinguished Paper Award
Describes a method for performing dynamic analysis at the module level to enable module-level execution security. I only worked on the Racket implementation, not the JavaScript part.

Read →

Eventually Consistent Partying

SIGBOVIK, 2019
This one might be a joke.

Read →