Dennis Khylkouski

Security Research

Found and reported vulnerabilities across multiple enterprise, startup, and public-sector targets. Findings have included critical issues across several YC-backed companies, government systems, and critical infrastructure, totaling an estimated $10B+ in potential damages.

Recruiting Intelligence

One thing I have been working on is ranking people by evidence instead of what they say about themselves. The idea is that competition results, commit history, and writing are more reliable signals than a resume, and the question is how to collect and weight them.

That turned into Metric, which I co-founded with my brother. It pulls signals from competitions, repos, talks, and private or paywalled sources, then outputs ranked candidates with scores and a breakdown of why they placed where they did. We backtested against real outcomes and got 93% accuracy.

Hackathons

I work at Cerebral Valley, where we host hackathons, product launches, and demo days in San Francisco with OpenAI, Anthropic, Meta, Google, and YC. I have competed in multiple and won 8, including YC and Replicate.

Projects

Metric - recruiting intelligence layer for builders. Scrapes competition leaderboards, gated developer communities, GitHub history, paywalled content, and CTF results. Outputs ranked candidates with scores and evidence. 30K+ people ranked. (try to find the easter eggs on the site)
SF Graffiti Search - semantic search over 87,790 photos taken by San Francisco city inspectors documenting graffiti violations. Each image was described by Gemini Flash so you can search by content, style, or location. Images sourced by walzr.
Baremodel - uncensored model API, drop-in for any coding agent with no content filtering or request logging.
SynthID Remover - removes SynthID watermarks by re-rendering images through a diffusion reconstruction pipeline using ControlNet edge guidance and multi-pass denoising, while preserving the original image structure.

Miscellaneous

My AI Usage - a live breakdown of my Claude Code and Codex token usage and costs by day, model, and session.
Terminal - a shared root shell running in a sandboxed Docker container. resets every 10 minutes. try some commands.

... visitors