Máni Sverrisson mani@sverr.is
sverr.is Compiled 09 / 2026 · Iceland

Máni Sverrisson

Subject: offensive security · software engineering student
Click me
Classification
PERSONAL PORTFOLIO
Location
ICELAND · 65°N — 18°W
Affiliation
REYKJAVÍK UNIVERSITY · STANFORD SUMMER '26
Status
OPEN TO OPPORTUNITIES

I break into systems for the people who own them, and build tools that do it automatically.

Attack surface mapping Recon automation Web app testing Email & DNS security Browser automation Agentic AI tooling Coordinated disclosure
( 01 — Projects ) BSc thesis

Projects

F-001 BSc thesis · with Aftra · 2026

ShadowWatch

Every time someone signs up for a service with their work email, the company's attack surface grows, usually without anyone noticing. ShadowWatch is an AI agent that finds those accounts.

01 Forge an AI agent writes the detectors and tests them in real Chrome over MCP
02 Scanner runs the detectors without AI, so it's fast and cheap
  • Agentic AI
  • Attack surface management
  • Python
  • MCP
Read thesis ↗ with Bjartur · Magni · Sölvi · Viktor
Terminal recording of a ShadowWatch scan listing detected services and their status
Exhibit A — live scan output
( 02 — Research ) Defend Iceland
F-002 Severity: Critical ×9 Defend Iceland · Dec 2025 — present

Vulnerability research

Findings across government, banking, insurance and pension systems. One supply-chain disclosure reached 1,100+ mail domains.

# details withheld under responsible disclosure
9
Rated critical
15
Approved findings
1,100+
Domains · one finding
Severity scale · 15 findings · as rated by the program
  • Critical 9

    The highest rating, for bugs that let an attacker take over a system or access a lot of data.

  • High 1

    Serious bugs that only work under certain conditions.

  • Medium 1

    Bugs with limited impact.

  • Other 4

    Low-risk or informational findings.

"When I want to understand something, I take it apart and rebuild it from scratch."
( 03 — Education ) 7 commits

Education

A commit history - from grade school to Stanford University, one branch at a time.

mani@stanford:~/education$ git log --graph --decorate --all
main finland-exchange stanford-summer
  • f0a71c3 HEAD → stanford-summer tag: summer-2026
    Stanford University
    Visiting Summer Student
    2026 · Stanford, California · # checked out from main
  • c4e2b9d main tag: shadowwatch-v1.0
    BSc thesis - ShadowWatch
    An AI agent that writes & maintains detectors for shadow registrations - built with Aftra.
    2026 · Reykjavík University · read thesis ↗
  • 9b3d5a1 in progress
    Reykjavík University
    BSc · Software Engineering / Computer Science
    Aug 2023 – present · Iceland
  • 71c0e34 tag: studentsprof
    Merge branch 'finland-exchange'
    Stúdentspróf
    Graduated Menntaskólinn í Kópavogi (MK) - Icelandic matriculation / upper-secondary diploma.
    2022 · Iceland
  • 2a6e4f8 branch: finland-exchange
    Tiirismaan peruskoulu
    Student exchange - Finland
    2020 · 1 week
  • 5d8f0c2
    Menntaskólinn í Kópavogi (MK)
    Enrolled - Raungreinabraut (Natural Sciences track)
    2019 · Iceland
  • e5c1a90 (root-commit)
    Kársnesskóli
    Primary & lower-secondary school
    2009 – 2019 · Iceland
# 7 commits · 3 branches · 1 merge · HEAD → stanford-summer
( 04 — Contact )

Let's build or break something.

I'm open to security research, internships, and collaborations. Say hello.

PGP fingerprint · 6B5A 6BB2 2162 B413 91E8 4C66 0D8B E579 2E93 E257