Skip to content
snailsploit[$]Adversarial · Research
Co-Founder · Web & Application Security

Avraham Shemesh

Self-taught developer who, with his childhood friend Sahar, shipped their first SaaS at 16 — sold to buy their first car. Built and sold a secure internet café business. Transitioned from product engineering to web penetration testing to security research — each step driven by the same instinct: understand how the system works, then find where the design diverges from behavior.

26 WordPress CVEs through Wordfence. VDPs including cable provider paywall bypasses. Web Application Security Architect specializing in SSDLC.

Avraham sets the principle-based mindset that defines how SnailSploit researches. Every finding traces to an underlying principle. Because he comes from building software, he knows where in the development lifecycle each bug should have been caught.

Focus
Web & application security · Cloud infrastructure · SSDLC · Principle-based vulnerability research
Receipts
26 CVEs · WordPress ecosystem research · Cable paywall VDPs
Writing
2026-05-19 · SSDLC
Atomicity as a Security Control — The All-or-Nothing Rule
Atomicity is a security control, not just a database feature. How partial transactions become exploitable inconsistencies — and where in the SSDLC to catch them.
LinkedIn ↗Wordfence profile ↗GitHub ↗