Bio
Dr. David Brumley is Chief AI & Science Officer at Bugcrowd and a full professor at Carnegie Mellon University, where he has spent decades advancing the state of offensive security. He is the founder of picoCTF, the world’s largest cybersecurity competition, and advisor to PPP/MMM, one of the most successful competitive hacking teams globally, and a venture partner at Rain Capital.
His work spans automated vulnerability discovery, exploit generation, and large-scale offensive systems, including pioneering efforts such as Mayhem, the Cyber Grand Challenge–winning technology. His research and products have helped shape how organizations think about continuous, automated security at scale.
Session (1)
Additional Speaker Details
Using publicly available information we constructed an analysis to help you get a feel for this speaker before deciding to attend their session.
David Brumley is the Chief AI and Science Officer at Bugcrowd (formerly CEO and co-founder of Mayhem Security, which Bugcrowd acquired in November 2025) and a Carnegie Mellon professor whose team won the 2016 DARPA Cyber Grand Challenge — bringing two decades of automated vulnerability-discovery research into production security systems. Attend his session to hear a practitioner who has actually built and shipped AI exploitation systems explain where machine intelligence beats elite human hackers today, where it still fails, and what that means for defenders as AI-generated bug reports flood security pipelines.
Speaking style
Recent talks (2)
GitHub
@dbrumley- dbrumley/redebug★ 25ReDeBug source code — Python tool for finding unpatched code clones in vulnerability databases
- dbrumley/recfi★ 19A retargetable CFI implementation in LLVM
- dbrumley/bitshred★ 15Bitshred research project code — binary similarity analysis in C
- exploitbench/exploitbenchorg★ 264ExploitBench measures how far AI agents climb the exploitation ladder, from reaching vulnerable code to arbitrary code execution
Recent writing (4)
- ExploitBench: A Capability Ladder Benchmark for LLM Cybersecurity Agents · paper · May 2026
- AI benchmarking report: Measuring the exploitation ladder for AI models · blog · May 2026
- Sloptimism is breaking any system built on human validation · blog · Apr 2026
- Bugcrowd acquires Mayhem Security: Redefining AI-powered security testing · blog · Nov 2025
Podcasts & interviews (1)
- Interview with David Brumley, Chief AI and Science Officer at Bugcrowd · TechNadu · Nov 2025