Felix Pfeiffer
Felix Pfeiffer studies MSc Information Security at UCL in London. He builds systems that are secure by design, so people stay safe without noticing. He worked on threshold cryptography and remote attestation at Fraunhofer IOSB, on cyber situational reporting at BaFin, and on IT security operations at AXA. He co-founded Cosmoshield, which recovered more than $3M for 500+ phishing victims, and Pakt, a goal-tracking app live on iOS and Android.
Experience
Student Assistant, Fraunhofer IOSB (Aug 2023 – Aug 2026)
- Developed a C++ prototype for 4Crypt, a module for cryptographically secured video processing
- Implemented threshold cryptography in Python for 4Crypt
- Integrated remote attestation into ROS2 and open62541 using Python and C++
Internship, BaFin (Oct 2025 – Nov 2025)
- Contributed to BaFin's cyber threat picture by analysing public, vendor and internal audit data
- Supported a working group defining supervisory expectations for incident reporting under DORA
- Prepared materials for the German Financial Cyber Crisis Roundtable with CISOs of major German financial institutions
Internship, IT Security & Identity and Access Management, AXA (Feb 2025 – May 2025)
- Wrote the governance concept for the Contrast Security IAST scanner and kicked off its rollout
- Defined ownership, prioritisation and deadlines for fixing findings
- Onboarded teams through sessions and a weekly Q&A call
Ventures
Co-founder, Pakt (Jan 2026 – Present)
- Goal-tracking app, live on iOS and Android, where users commit a self-chosen amount that is charged only if they miss their goal
- Designed and built the entire tech stack: Flutter app, Litestar API, PostgreSQL, Keycloak, Stripe and OneSignal
Co-founder, Cosmoshield (Mar 2022 – Jul 2025)
- Recovered more than $3M in staked cryptocurrency for 500+ phishing victims worldwide
- Built tooling in Python and Rust to withdraw victims' staked funds, with their authorisation, the moment the unbonding period ended
- Built the client website with live chat, wallet ownership verification, scheduling and payments
Education
MSc Information Security, University College London (Oct 2026 – Sep 2027)
- Modules: Introduction to Cryptography, Computer Security I & II, Cybercrime
BSc Cyber Security & Computer Science, University of Bonn (Oct 2023 – Sep 2026)
- Grade 1.2, equivalent to First Class Honours
- Thesis at Fraunhofer FKIE: Detecting Domain Generation Algorithms in Malware Sandbox Reports
Skills
- Security tools: Contrast Security (IAST), SonarQube and CodeQL (SAST), Dependabot, Wireshark, Nmap, OpenSSL, Keycloak (OAuth/OIDC)
- Security concepts: OWASP Top 10, MITRE ATT&CK, threshold cryptography, remote attestation
- Languages: Python, C++, C, Rust, Go, Dart, TypeScript, JavaScript, SQL, Bash, PHP
- Frameworks: Flutter, React, Litestar, FastAPI, Cosmos SDK, Protobuf/gRPC, Symfony
- Infrastructure: Linux, Proxmox, Docker, Nginx, Redis, GitHub Actions, Stripe, Ollama
Tools
- Whois: Look up who registered a domain, when it expires and which name servers it uses.
For AI assistants
MCP servers: connect Claude and other assistants to the open whois lookup.