Ciao, I'm Marco 👋

Cloud Platform & AI Security Engineer
I make production AI systems secure, and the cloud platforms they run on resilient.

Cloud Platform & AI Security Engineer. My clients already run a live system they can't afford to stop, and most of them have shipped an AI feature into it that nobody has threat modeled yet.

• 🔭 Proof of work: marcobellingeri.dev audits itself. The Security section reads its own response headers back out of the live response, the A+ links to a Mozilla Observatory scan anyone can re-run, and every merge to main deploys through CI.
• 🤖 AI security is what I do most days: OWASP LLM Top 10 applied to production RAG systems, prompt injection defense for external content flows, LLM-as-a-judge evaluation gates in CI, EU AI Act art. 50 transparency requirements, and MITRE ATLAS as a threat modeling reference.
• 🔐 Every deploy ships a CycloneDX SBOM and a keyless OIDC provenance attestation. Dependencies are pinned by SHA, zizmor reads the workflows, gitleaks reads the whole history.
• 🖥️ There's a hidden CRT terminal on the site. ⌘K is one way in. There's another.

📅 Book 30 minutes: free, no commitment

🌐 Live right now: marcobellingeri.dev vetreriamonferrina.com
_{running on infrastructure I operate myself}

Ten of them, the same ten the site shows and in the same order. They reinforce the same direction: AI security, secure software supply chain, and cloud security practices.

_{The other 35 are on Credly. Badges you can click are worth more than badges you can claim.}

guest@bellingeri:~$ exit
_{© Marco Bellingeri, tutti i diritti e nessun bug in produzione (si spera).}