Staff Security Engineer · Builder · YC Founder
Free Wortley
Pushing the limits of AI and currently building the tools to decrease the security risks they pose.
whoami
free (Free Wortley) — Seattle, WA
uid=1337(free) euid=0(root) groups=(wheel,kvm,agents,decomp)
cat about.txt
YC Founder (LunaSec, S19), ex-Scale AI, ex-Figma, ex-Uber, ex-Snapchat.
Best known for coining the term "Log4Shell" for the Log4j vulnerability.
Pushing the limits of AI and currently building the tools to decrease the security risks they pose.
Latest writing
All postsHow agent swarms decompile games byte-for-byte
Published
Seven months teaching fleets of coding agents to reconstruct a shipped game binary byte-for-byte — and building the oracles that keep them honest.
LLM-assisted decompilation: tools, not prompts
Published
How fleets of coding agents byte-matched 40,000+ functions of a stripped Xbox 360 binary in ten weeks — by never letting the model judge its own work.
The Milo engine decompilation saga
Published
How one engineer and a fleet of AI agents reverse-engineered a shared game engine across three games and two consoles — and why the best verification tool turned out to be the thing that runs the code.
Featured work
All projects
dream-serpent — sandboxed agent platform
activeA secure sandboxing platform for autonomous coding agents — per-session KVM VMs with default-deny networking and credential-swap egress — built in five and a half weeks almost entirely by the agents it is designed to contain.
Milo engine — native + WebGPU port
activeExtracted a shared C++17/WebGPU runtime from one decompiled game and re-linked it into a second from a different console, so reverse-engineered code runs natively on x86_64 and in a browser.
Rock Band 3 (Xbox 360) — decompiling a symbol-less binary
activeByte-exact decompilation of a symbol-less Xbox 360 binary: 44,226 of 69,301 functions matched in ten weeks by fleets of Claude Code agents — 78.9% of the game and engine code.