Dr. Devam R Shah

CISO · DPO · AI Security & AI Governance Leader

Translating AI risk and cyber risk into board-level business strategy.

CISO & DPO leading AI security, AI governance, privacy, and compliance at Locus — part of the Ingka Group (IKEA) — a cloud-native logistics AI platform powering 1.5B+ deliveries across 30+ jurisdictions.

A decade across AI SaaS, healthcare, logistics, edtech, robotics, and defense — building security programs from the ground up, leading crisis response, and translating AI risk into revenue and regulatory posture.

Recognized CISO of the Year (2022 and 2023). Doctorate in AI and Cybersecurity.

Function         CISO + DPO (unified AI security + privacy)
Scale            30+ jurisdictions · 1.5B+ deliveries · cloud-native logistics AI
Frameworks       NIST AI RMF · ISO/IEC 42001 · EU AI Act · SOC 2 · GDPR · DPDPA
Team / Budget    Lean team of 5 · ~$1M annual
Outcomes         70,000+ vulnerabilities remediated · SOC 2 Type II delivered
                 96% reduction in late-stage vulnerabilities
                 AI governance stood up aligned to NIST AI RMF + ISO 42001

Controls stack: LLM guardrails (input/output) · prompt-injection defense · PII redaction before inference · model inventory with version pinning · AI-assisted SAST/SCA/secrets on AI-generated code · indirect-injection filters on RAG sources · phishing-resistant IAM (FIDO2) · CASB · multi-channel DLP · Zero Trust substrate.

Built in the open. Community-driven. Zero enterprise licensing.

Public pull requests to repositories I don't own — auto-refreshed daily.

21 merged · 17 in review · 11 closed across 31 external project(s).

• projectdiscovery/nuclei-templates (12.8K ⭐) — Community curated list of templates for the nuclei engine to find security vulnerabilities.
    ✅ 6 merged · ⚪ 3 closed · merged diff +154 / −66
• Tencent/AI-Infra-Guard (4.5K ⭐) — A full-stack AI Red Teaming platform securing AI ecosystems via OpenClaw Security Scan, Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.
    ✅ 2 merged · 🟡 1 in review · merged diff +651 / −0
• msoedov/agentic_security (2.0K ⭐) — Agentic LLM Vulnerability Scanner / AI red teaming kit 🧪
    ✅ 2 merged · merged diff +720 / −7
• GRCEngClub/claude-grc-engineering (372 ⭐) — Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.
    ✅ 2 merged · ⚪ 1 closed · merged diff +1,698 / −7
• ReversecLabs/spikee (231 ⭐) — Simple Prompt Injection Kit for Evaluation and Exploitation
    ✅ 2 merged · 🟡 1 in review · merged diff +199 / −2
• redcanaryco/atomic-red-team (12.4K ⭐) — Small and highly portable detection tests based on MITRE's ATT&CK.
    ✅ 1 merged · 🟡 1 in review · merged diff +111 / −0
• NVIDIA/garak (8.8K ⭐) — the LLM vulnerability scanner
    ✅ 1 merged · ⚪ 1 closed · merged diff +107 / −0
• intelowlproject/IntelOwl (4.7K ⭐) — IntelOwl: manage your Threat Intelligence at scale
    ✅ 1 merged · merged diff +376 / −0
• vulnerability-lookup/vulnerability-lookup (562 ⭐) — Vulnerability-Lookup facilitates quick correlation of vulnerabilities from various sources, independent of vulnerability IDs, and streamlines the management of Coordinated Vulnerability Disclosure (CVD).
    ✅ 1 merged · merged diff +50 / −0
• sublime-security/sublime-rules (369 ⭐) — Sublime rules for email attack detection, prevention, and threat hunting.
    ✅ 1 merged · merged diff +1 / −1
• Yamato-Security/hayabusa-rules (222 ⭐) — Curated Windows event log Sigma rules used in Hayabusa and Velociraptor.
    ✅ 1 merged · merged diff +407 / −0
• kubescape/regolibrary (131 ⭐) — The regolibrary package contains the controls Kubescape uses for detecting misconfigurations in Kubernetes manifests.
    ✅ 1 merged · merged diff +96 / −3
• KeygraphHQ/shannon (46.8K ⭐) — Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
    🟡 1 in review
• projectdiscovery/nuclei (30.5K ⭐) — Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
    🟡 1 in review
• gitleaks/gitleaks (28.7K ⭐) — Find secrets with Gitleaks 🔑
    🟡 2 in review
• blacklanternsecurity/bbot (10.4K ⭐) — The recursive internet scanner for hackers. 🧡
    🟡 1 in review
• PyCQA/bandit (8.2K ⭐) — Bandit is a tool designed to find common security issues in Python code.
    🟡 1 in review
• Pennyw0rth/NetExec (5.8K ⭐) — The Network Execution Tool
    ⚪ 1 closed
• ossf/scorecard (5.6K ⭐) — OpenSSF Scorecard - Security health metrics for Open Source
    ⚪ 1 closed
• RhinoSecurityLabs/pacu (5.3K ⭐) — The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
    🟡 1 in review
• confident-ai/deepteam (2.4K ⭐) — DeepTeam is a framework to red team LLMs and AI agents.
    🟡 1 in review
• DataDog/stratus-red-team (2.4K ⭐) — ☁️ ⚡ Granular, Actionable Adversary Emulation for the Cloud
    ⚪ 1 closed
• stacklok/toolhive (2.0K ⭐) — ToolHive is an enterprise-grade platform for running and managing Model Context Protocol (MCP) servers.
    ⚪ 1 closed
• utkusen/promptmap (1.2K ⭐) — a security scanner for custom LLM applications
    🟡 1 in review
• safedep/vet (1.1K ⭐) — Protect against malicious open source packages 🤖
    ⚪ 1 closed
• trailofbits/fickling (662 ⭐) — A Python pickling decompiler and static analyzer
    ⚪ 1 closed
• ossf/malicious-packages (597 ⭐) — A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerability (OSV) format.
    🟡 1 in review
• trailofbits/semgrep-rules (515 ⭐) — Semgrep queries developed by Trail of Bits.
    🟡 1 in review
• sigstore/model-transparency (244 ⭐) — Supply chain security for ML
    🟡 1 in review
• t0sche/cvss-bt (226 ⭐) — Enriching the NVD CVSS scores to include Temporal & Threat Metrics
    🟡 1 in review
• falcosecurity/rules (184 ⭐) — Falco rule repository
    🟡 1 in review

AI & LLM Security — MLSecOps · Prompt injection defense · AI red teaming · Model supply chain · OWASP Top 10 for LLMs · RAG security · Agentic controls · Inference-time abuse monitoring

AI Governance — NIST AI RMF · ISO/IEC 42001 · EU AI Act high-risk categorization · AI DPIA · AI TPRM · Responsible AI · Human-in-the-loop design

Privacy & Compliance — GDPR · DPDPA · COPPA · HIPAA · HITRUST i1 · SOC 2 Type II · ISO 27001 · ISO 27701

Security Programs — Zero Trust architecture · Phishing-resistant IAM (FIDO2) · DevSecOps · AppSec automation · Incident response · Crisis leadership · Bug bounty & red teaming

Boardroom — Risk translation · Regulatory strategy · B2B revenue unlock via certifications · AI risk appetite framing

• CISO of the Year — 2022 and 2023
• Doctorate — AI and Cybersecurity (ISTM)
• Postgraduate — Symbiosis Centre for Information Technology
• Board advisor · fractional CISO · keynote speaker on AI security strategy and AI governance program design

Reach Out

Advisory · AI governance program design · AI compliance readiness (NIST AI RMF · ISO 42001 · EU AI Act) · board briefings

devamshah.github.io  ·  LinkedIn  ·  devamshah91@gmail.com

_{Security programs built to ship — transparent, open-source, board-defensible.}