About

I'm Kenji Lowe, a security engineer based in Boston.

I've spent the last 10 years building secure-by-default tooling for product teams, most recently on a small team where I look after least privilege and dependency pinning. Before that I bounced between agencies, startups and one very large company.

I started Quiet Signal in 2025 as a place to think out loud. Most posts begin as notes from real projects: something broke, I fixed it, and I wanted to remember why. If one of them saves you an afternoon, it was worth writing.

What I write about

• Dependency pinning
• Secret rotation
• Content security policy
• Threat modeling
• Session management

Get in touch

The best way to reach me is by email at hello@us01qzz.jp2haozu-naookg-okak.cc. I read everything, even if replies take a little while. You can also find me on GitHub and Mastodon.

Opinions here are my own and not those of any employer, past or present.