Marco

Cloud, AI & Security Engineer | Python, AWS & DevSecOps. Building open-source tools, exploring AI agents, breaking things in staging so I can fix them in prod. 🇮🇹

Casale Monferrato, 15033, AL, Italy Joined on Apr 15, 2026 https://www.marcobellingeri.dev

Education

Computer Science - Università del Piemonte Orientale Amedeo Avogadro

Pronouns

he/him

Marco

Oct 29

The Guardian denied both commands. It never read either one.

#security #ai #owasp #llm

5 min read

Want to connect with Marco?

Create an account to connect with Marco. You can also sign in below to proceed if you already have an account.

Create Account

Already have an account? Sign in

Marco

Oct 27

The Guardian blocked the command. The agent told me how to go around it.

#security #ai #owasp #llm

4 min read

Marco

Oct 27

The Guardian redacted my secret. The Read tool walked around it.

#security #ai #owasp #testing

5 min read

Marco

Oct 26

Four times my system looked correct and wasn't.

#security #ai #testing #llm

3 min read

Marco

Sep 19

Best LiteLLM alternative for enterprises

#ai #llm #devops #security

10 min read

Marco

Sep 16

Node 22.22 runs TypeScript. Ubuntu's Node 22.22 doesn't.

#node #typescript #ubuntu #devops

3 min read

Marco

Sep 8

A week of green runs, and the pipeline was waiting for me

#devops #automation #monitoring #postgres

3 min read

Marco

Aug 28

A hash-based CSP has no room for a syntax highlighter

#security #astro #webdev #css

5 min read

Education Track: Build Apps with Google AI Studio

Marco

Aug 22

I Built ArchShield: An AI Architecture & Security Baseline Assistant.

#deved #learngoogleaistudio #ai #gemini

2 min read

Marco

Aug 22

I pentested my own AI hub and shipped the method, not the map.

#ai #opentelemetry #programming #security

6 min read

Marco

Aug 21

Cross-posting to dev.to without giving away your SEO.

#api #seo #webdev #writing

5 min read

Summer Bug Smash: Smash Stories 🐛🛹

Marco

Aug 20

I wrote a test for prompt injection. It passed while the attack worked.

#devchallenge #bugsmash #security #ai

5 min read

Summer Bug Smash: Clear the Lineup 🐛🛹

Marco

Aug 20

The alarm wasn't silent. It was lying.

#devchallenge #bugsmash #observability #python

7 min read

Marco

Aug 12

I let every AI crawler in. A month later I cannot tell you how many people read me.

#ai #analytics #seo #web

6 min read

Marco

Aug 11

A permissive robots.txt is not a licence.

#ai #data #llm #webscraping

4 min read

Marco

Aug 11

My quality gate wasn't strict. It was dead.

#automation #ci #llm #testing

4 min read

Marco

Jul 21

Guaranteed JSON from Claude, and the five parsers I deleted to get it.

#ai #claude #programming #sideprojects

4 min read

Marco

Jul 15

I made my portfolio site audit its own security headers, live, in front of you.

#showdev #security #webdev #astro

5 min read

Marco

Apr 15

Thirteen PRs in one afternoon, and the boring rule that made it possible.

#ai #python #claude #opensource

4 min read

DEV Community

Marco

Badges

Summer Bug Smash Completion Badge

4 Week Community Wellness Streak

Build Apps with Google AI Studio

2 Week Community Wellness Streak

1 Week Community Wellness Streak

Writing Debut

Organizations

Marco's Org

GitHub Repositories

Skills/Languages

Currently learning

Currently hacking on

Available for

The Guardian denied both commands. It never read either one.

Want to connect with Marco?

The Guardian blocked the command. The agent told me how to go around it.

The Guardian redacted my secret. The Read tool walked around it.

Four times my system looked correct and wasn't.

Best LiteLLM alternative for enterprises

Node 22.22 runs TypeScript. Ubuntu's Node 22.22 doesn't.

A week of green runs, and the pipeline was waiting for me

A hash-based CSP has no room for a syntax highlighter

I Built ArchShield: An AI Architecture & Security Baseline Assistant.

I pentested my own AI hub and shipped the method, not the map.

Cross-posting to dev.to without giving away your SEO.

I wrote a test for prompt injection. It passed while the attack worked.

The alarm wasn't silent. It was lying.

I let every AI crawler in. A month later I cannot tell you how many people read me.

A permissive robots.txt is not a licence.

My quality gate wasn't strict. It was dead.

Guaranteed JSON from Claude, and the five parsers I deleted to get it.

I made my portfolio site audit its own security headers, live, in front of you.

Thirteen PRs in one afternoon, and the boring rule that made it possible.