Hi, I'm Adam Issa. I'm a Security Engineering Intern at Clerk, a Research Assistant in AI security at Harvard University (advised by Bruce Schneier), and a Computer Engineering student at the University of Toronto. At Clerk I break auth flows for a living; at Harvard I research semantic integrity attacks against LLM summarization. 4x hackathon winner, based in Toronto.
Reported 25+ authentication and multi-tenant vulnerabilities across Clerk's Go backend, edge infrastructure, and 6 SDKs, including two one-click account takeovers and a zero-click cross-tenant organization takeover. Built a stateful API fuzzer, deterministic simulation testing for auth state machines, and a vulnerability-research knowledge graph powering variant hunting and autonomous pentesting.
Research on semantic integrity attacks against LLM summarization, advised by Bruce Schneier: initial manuscript, pilot findings, threat model, and evaluation protocol.
Vulnerability management and security checks across access controls, logs, TLS certificates, DNS, and backups.