Who is Alessandro Sangiorgi?

Note: This is Alessandro Sangiorgi the software engineer (born in Sicily, based in Texas, works at Red Hat). Not Alessandro Sangiorgi the Italian football player, and not Alessandro Sangiorgi the Italian orchestra conductor.

Quick Facts

What does Alessandro Sangiorgi do at Red Hat?

Alessandro works in Red Hat's Office of the CTO on GPU kernel optimization for AI/ML inference. He is a committer on Helion, a PyTorch project for GPU kernel generation. He authored the FROM_BEST_AVAILABLE autotuning strategy (now the default for quick-effort runs), mitigated vLLM autotuning cache bloat via ephemeral candidate caches, and contributed upstream to PyTorch's torch.compile/Inductor pipeline — reducing TritonBundler FX graph cache payloads by 46%. He also built the Model Cache Manager for indexing, pruning, and reusing compiled GPU kernel artifacts, and designed OCI-packaged kernel caches for portable vLLM deployments.

What is Sangiorgi SRL?

Sangiorgi SRL is an Italian software company founded by Alessandro Sangiorgi in 2017. Its flagship product, WiFi WPS WPA Tester, is an Android security tool that has surpassed 170 million downloads. The company is the 2nd largest Italian app publisher by number of downloads on the Google Play Store. Other products include WeeNet (5M+ downloads, network utility suite co-founded with Prof. Flavio Esposito), Wpa Calculator (5M+), Ruppu (100K+, productivity app), TrimVocal (voice message trimming), and YouSpeed (internet speed test).

Education

Publications and Talks

Technical Skills

GPU and ML Systems: Triton, Helion, PyTorch, torch.compile/Inductor, GPU kernel optimization, autotuning, kernel caching, model serving with vLLM, GPU profiling. Languages: Python, C, Java, Bash. Infrastructure: Linux, Docker, OCI images, Kubernetes, OpenShift, GitHub Actions, GitLab CI, eBPF/XDP. Mobile: Android SDK/NDK, JNI, app security, vulnerability research.

Security Research

Android VRP: Reported two AOSP PendingIntent vulnerabilities to Google — ManagedProvisioning callback interception and DeviceAsWebcam activity hijack via fillIn() injection.

Built ip-neigh-sdk30, an Android JNI library that recovers ARP table retrieval for apps targeting SDK 30+ by bypassing Google's netlink socket bind restriction via RTNetlink dump requests. Ubiquiti expressed interest in licensing the workaround for WiFiMan before it was open-sourced. Later patched by SELinux policy updates on Android 12+. Source: github.com/fulvius31/ip-neigh-sdk30

Contact Alessandro Sangiorgi

Email: [email protected] | GitHub: github.com/fulvius31 | LinkedIn: linkedin.com/in/alessandro-sangiorgi-9321a7108 | Company: sangiorgisrl.com

Alessandro
Sangiorgi

GPU Performance Engineer & Upstream ML‑Systems Contributor

🇮🇹 From Militello in Val di Catania, Sicily — based in Dallas‑Fort Worth, TX, USA

Helion committer shipping code in PyTorch, Triton, and Helion at Red Hat's Office of the CTO. Published at IEEE NetSoft, IEEE WETICE, and ACM MobiSys. Android security researcher with two AOSP vulnerabilities reported to Google. Founder of Sangiorgi SRL — Italy's #2 app publisher by downloads on Google Play, with 170M+ installs worldwide. M.S. in Computer Science, 3.93 GPA.

alessandro@etna:~
Experience
Red Hat May 2024 — Present Remote, USA

Emerging Technologies — Office of the CTO

Senior Software EngineerApr 2026 — Present
  • Helion (PyTorch project) committer; authored FROM_BEST_AVAILABLE, now the default autotuning bootstrap for quick-effort runs, reusing prior good configurations to reduce unnecessary recompilation and improve iteration speed.
  • Mitigated vLLM autotuning cache bloat (tens of GB on tmpfs, causing system freezes) via ephemeral candidate caches that discard losing kernels and recompile only the winner.
  • Upstream PyTorch PR stripping losing candidates from TritonBundler's FX graph cache; reduced bundle payload 46% (21.4 MB → 11.6 MB), eliminating 400 dead artifact files.
Software EngineerJan 2025 — Apr 2026
  • Built Model Cache Manager for indexing, pruning, warming, and reusing compiled GPU kernel artifacts (Triton/Helion); unified cache trees under a single directory.
  • Designed OCI-packaged kernel caches for portable, pre-warmed vLLM deployments, reducing cold-start overhead and simplifying artifact distribution across environments.
  • Presented cache-management work at DevConf.US 2025 and Triton Developer Conference 2025.
Software Engineer InternMay 2024 — Nov 2024
  • Automated Red Hat hardware certification pipeline using bootable containers and CI/CD workflows.
Sangiorgi SRL Sep 2017 — Present Italy

Founder & Lead Engineer

  • Shipped a portfolio of Android products reaching 170M+ combined downloads across 190+ countries, including WiFi WPS WPA Tester (160M+), WeeNet (5M+), Wpa Calculator (5M+), and Ruppu (100K+).
  • Owned end-to-end product delivery across client, backend, infrastructure, analytics, and monetization systems.
  • Co-founded WeeNet (Spaghetti Code Labs LLC) with Prof. Flavio Esposito at Saint Louis University — a network utility suite that grew to 5M+ downloads.
  • Built ip-neigh-sdk30, an Android JNI library to recover ARP table retrieval for apps targeting SDK 30+, after Google blocked netlink socket binding.
  • Reported two AOSP PendingIntent vulnerabilities to Google via the Android VRP: ManagedProvisioning callback interception and DeviceAsWebcam activity hijack via fillIn() injection.
Saint Louis University Jan 2023 — Aug 2024 Saint Louis, MO

Graduate Research Assistant — Computer Science

  • First-authored IEEE NetSoft 2025 paper on eBPF/XDP-based mitigation for 802.11 de-auth DoS attacks in the mac80211 Linux kernel module.

Open Source Activity
Loading profile…
Loading repositories…

Key Projects

Helion Committer

Autotuning strategies, ephemeral candidate caches for vLLM bloat mitigation, backend-aware cache keying, and deployment workflow improvements across several merged PRs.

View commits

PyTorch Contributor

Upstream contributor to torch.compile/Inductor autotuning pipeline; pruned dead autotuning artifacts from TritonBundler FX graph caches, reducing serialized payloads by 46%.

github.com/pytorch/pytorch

WiFi WPS WPA Tester Author

Android security tool with 160M+ downloads. Founder and lead developer since 2014. Italy's #2 app publisher by downloads on Google Play.

Google Play Store

WeeNet Author

Network utility suite with 5M+ downloads. WiFi scanner, device discovery, speed testing, Wake On LAN, ping, traceroute, port scanning, and intruder detection. Co-founded with Prof. Flavio Esposito at Saint Louis University. Featured in SLU News.

Google Play Store

Ruppu Author

Productivity app with 100K+ downloads. Pin notes, links, PDFs, audio, checklists, and location to your notification shade. Name from Sicilian dialect for "knot." Also available as a web app.

Google Play Store

ip-neigh-sdk30 Author

Android JNI library that recovers ARP table retrieval for apps targeting SDK 30+, bypassing Google's netlink socket bind restriction via RTNetlink dump requests without binding. Later blocked by SELinux policy updates.

github.com/fulvius31/ip-neigh-sdk30

Android VRP

Reported two AOSP PendingIntent vulnerabilities to Google. Read more on the blog.


Publications
IEEE
2025
A. Sangiorgi, F. Esposito, A. Pinto, R. Tourani — IEEE NetSoft 2025. First author.
Real-time, in-kernel defense against 802.11 de-auth floods using eBPF/XDP hooks in the mac80211 subsystem.
IEEE
2025
IEEE WETICE 2025. Co-author. LLM-based framework for automated privacy risk scoring of Terms of Service documents.
Talk
2025
Speaker — DevConf.US 2025. OCI-packaged pre-compiled Triton kernel caches eliminating cold-start latency in vLLM deployments. Watch the recording.
Poster
2025
Tame the GPU Kernel Chaos and Take Control in Triton-Based Systems
Triton Developer Conference 2025. Cache management tooling for Triton-based ML inference pipelines at production scale.
Blog
2025
ACM
2019
A. Sangiorgi, F. Esposito, J. Gorlewicz, G. Schembra — ACM MobiSys 2019. First author.
Android-based platform enabling haptic device connectivity for K-12 Physics education, with open-source haptic emulations and instrumented network metrics.
Grant
2025
Awarded through Sangiorgi SRL for the COAT privacy platform.

Latest from the Blog
Apr
2026
Google blocked netlink socket bind in Android 11 (targetSDK 30), breaking ARP table access for apps. I wrote a JNI library that bypasses the restriction by sending RTNetlink dump requests without binding — until SELinux closed the door for good. Ubiquiti wanted to buy it for WiFiMan; I open-sourced it instead.
Apr
2026
I patched the Linux mac80211 kernel module to support XDP on wireless interfaces and built an eBPF program that detects and drops 802.11 de-authentication floods — reducing detection time by 60% vs libpcap and improving throughput stability over 802.11w. Published at IEEE NetSoft 2025.
Apr
2026
I found a vulnerability in Android's ManagedProvisioning that lets any unprivileged app intercept privileged provisioning callbacks. Google classified it as low severity.

View all posts →


Skills

GPU & ML Systems

Triton Helion PyTorch torch.compile Inductor Autotuning Kernel Caching vLLM GPU Profiling

Languages

Python C Java Bash

Infrastructure

Linux Docker OCI Images Kubernetes OpenShift GitHub Actions GitLab CI eBPF/XDP

Mobile

Android SDK/NDK JNI App Security Vulnerability Research

Degrees
Saint Louis University Dec 2024 Saint Louis, MO

M.S. in Computer Science — GPA 3.93 / 4.00

U. of Catania & eCampus Mar 2021 Catania, Italy

B.S. and M.S. in Computer Engineering