Hi, I’m Cory Marsh

I’m a security researcher, software developer, and entrepreneur based in Boise, Idaho. I’ve spent more than two decades building, breaking, securing, and improving software and web infrastructure.

My background spans offensive security, defensive security, malware analysis, application security, infrastructure, and software engineering. Over the years I’ve worked with organizations ranging from technology companies and financial institutions to critical infrastructure environments.

Today, much of my work focuses on building security and developer tools. I’m the creator of BitFire, a WordPress security platform built around runtime application protection—stopping dangerous actions inside an application before a vulnerability becomes a compromise.

I spend most of my time working with PHP, C, FreeBSD, Linux, WordPress, web security, automation, and AI-assisted software development. I’m especially interested in systems that are small, fast, understandable, and capable of doing more with less.

Outside of individual products, I like experimenting with new ideas: agent-first development tools, security research, high-performance systems, unusual datasets, and occasionally hardware projects that probably started with, “I wonder how fast this can go?”

This site is where I collect some of that work, along with projects, research, experiments, and ideas I find interesting.