Welcome to Tom Stacey’s (aka “t0xodile”) personal blog. Here you’ll find content about my adventures in web security research. If you have any questions or comments, please feel free to reach out to one of my socials.

I am a security researcher at PortSwigger bringing novel web hacking techniques to conferences like BlackHat and DEFCON. I spend most of my time hacking web applications or helping improve BurpSuite with a healthy dose of AI mixed into everything I do. When I’m not at work I’m usually playing some form of video / board game or building some kind of Lego.