About me

I’m currently (since September 2026) a Research Engineer at Epoch AI, working in benchmarks and cyber (benchmarks of cybersecurity, cybersecurity of benchmarks).

Some things I’ve done in the past:

• 2025-2026: worked as a PhD student at INRIA Rennes, in the AI security and auditing team ARTISHAU. Check out trackllm.net and my blog post Cheaply detecting changes in LLM APIs.
• 2024: published eyeballvul: a future-proof benchmark for vulnerability detection in the wild.
• 2023-2024: designed tasks to evaluate dangerous capabilities of AI models (especially in offensive cybersecurity), as a contractor for METR.
• summer and autumn 2023: attended MATS, where I worked on evaluations of autonomous hacking capabilities in AI models (writeup here).
• 2021-2022: worked at Red Balloon Security for a year and a half, as a vulnerability researcher (we discovered CVE-2022-22723 and CVE-2022-22725 in Schneider P3 and P5 protection relays, and showed for the first time that embedded devices could be hit by ransomware), and as a software engineer.
• 2017-2021: studied at École Polytechnique (X2017)
• 2017: worked full-time as a teacher in prison for 6 months