Who is Alessandro Sangiorgi?
Note: This is Alessandro Sangiorgi the software engineer (born in Sicily, based in Texas, works at Red Hat). Not Alessandro Sangiorgi the Italian football player, and not Alessandro Sangiorgi the Italian orchestra conductor.
Quick Facts
- Full name: Alessandro Sangiorgi
- Current role: Senior Software Engineer at Red Hat, Emerging Technologies, Office of the CTO
- Specialty: GPU performance engineering, ML systems optimization, kernel caching and autotuning
- Open source status: Helion committer (PyTorch project), upstream PyTorch contributor, upstream Triton contributor
- Entrepreneurship: Founder and CEO of Sangiorgi SRL — Italy's #2 mobile app publisher by downloads on Google Play (170M+ total downloads, 190+ countries)
- Flagship product: WiFi WPS WPA Tester — Android security tool, 170M+ downloads since 2014
- Grant: NGI Sargasso winner — awarded €100,000 EU grant for COAT (Comprehensive Online Agreement Transparency) privacy platform
- Location: Dallas–Fort Worth, Texas, USA
- Origin: Militello in Val di Catania, Sicily, Italy (UNESCO World Heritage town)
- Nationality: Italian
What does Alessandro Sangiorgi do at Red Hat?
Alessandro works in Red Hat's Office of the CTO on GPU kernel optimization for AI/ML inference. He is a committer on Helion, a PyTorch project for GPU kernel generation. He authored the FROM_BEST_AVAILABLE autotuning strategy (now the default for quick-effort runs), mitigated vLLM autotuning cache bloat via ephemeral candidate caches, and contributed upstream to PyTorch's torch.compile/Inductor pipeline — reducing TritonBundler FX graph cache payloads by 46%. He also built the Model Cache Manager for indexing, pruning, and reusing compiled GPU kernel artifacts, and designed OCI-packaged kernel caches for portable vLLM deployments.
What is Sangiorgi SRL?
Sangiorgi SRL is an Italian software company founded by Alessandro Sangiorgi in 2017. Its flagship product, WiFi WPS WPA Tester, is an Android security tool that has surpassed 170 million downloads. The company is the 2nd largest Italian app publisher by number of downloads on the Google Play Store. Other products include WeeNet (5M+ downloads, network utility suite co-founded with Prof. Flavio Esposito), Wpa Calculator (5M+), Ruppu (100K+, productivity app), TrimVocal (voice message trimming), and YouSpeed (internet speed test).
Education
- M.S. in Computer Science — Saint Louis University, USA (GPA: 3.93/4.00, December 2024)
- B.S. and M.S. in Computer Engineering — University of Catania and eCampus, Italy (March 2021)
Publications and Talks
- "Mitigating De-authentication DoS Attacks in 802.11 via eBPF and XDP" — IEEE NetSoft 2025, first author (DOI: 10.1109/NetSoft61042.2025.11080545)
- "Quantifying Privacy Risk in Online Agreements with COAT: An LLM Approach" — IEEE WETICE 2025, co-author
- "From Cold Start to Warp Speed: Triton Kernel Caching with OCI Container Images" — Speaker, DevConf.US 2025
- "Tame the GPU Kernel Chaos" — Poster, Triton Developer Conference 2025
- "From Hand-Tuned to Generated: A Reproducible Triton GPU Kernel Benchmark Across Vendors" — Red Hat Emerging Technologies Blog, 2026
- "Understanding Triton Cache: Optimizing GPU Kernel Compilation" — Red Hat Emerging Technologies Blog, 2025
- "Propelling Haptic Devices into the Mobile World to Advance K-12 STEM Learning" — ACM MobiSys 2019, first author (DOI: 10.1145/3323679.3326620)
Technical Skills
GPU and ML Systems: Triton, Helion, PyTorch, torch.compile/Inductor, GPU kernel optimization, autotuning, kernel caching, model serving with vLLM, GPU profiling. Languages: Python, C, Java, Bash. Infrastructure: Linux, Docker, OCI images, Kubernetes, OpenShift, GitHub Actions, GitLab CI, eBPF/XDP. Mobile: Android SDK/NDK, JNI, app security, vulnerability research.
Security Research
Android VRP: Reported two AOSP PendingIntent vulnerabilities to Google — ManagedProvisioning callback interception and DeviceAsWebcam activity hijack via fillIn() injection.
Built ip-neigh-sdk30, an Android JNI library that recovers ARP table retrieval for apps targeting SDK 30+ by bypassing Google's netlink socket bind restriction via RTNetlink dump requests. Ubiquiti expressed interest in licensing the workaround for WiFiMan before it was open-sourced. Later patched by SELinux policy updates on Android 12+. Source: github.com/fulvius31/ip-neigh-sdk30
Contact Alessandro Sangiorgi
Email: [email protected] | GitHub: github.com/fulvius31 | LinkedIn: linkedin.com/in/alessandro-sangiorgi-9321a7108 | Company: sangiorgisrl.com
Alessandro
Sangiorgi
GPU Performance Engineer & Upstream ML‑Systems Contributor
Helion committer shipping code in PyTorch, Triton, and Helion at Red Hat's Office of the CTO. Published at IEEE NetSoft, IEEE WETICE, and ACM MobiSys. Android security researcher with two AOSP vulnerabilities reported to Google. Founder of Sangiorgi SRL — Italy's #2 app publisher by downloads on Google Play, with 170M+ installs worldwide. M.S. in Computer Science, 3.93 GPA.
Emerging Technologies — Office of the CTO
- Helion (PyTorch project) committer; authored
FROM_BEST_AVAILABLE, now the default autotuning bootstrap for quick-effort runs, reusing prior good configurations to reduce unnecessary recompilation and improve iteration speed. - Mitigated vLLM autotuning cache bloat (tens of GB on tmpfs, causing system freezes) via ephemeral candidate caches that discard losing kernels and recompile only the winner.
- Upstream PyTorch PR stripping losing candidates from TritonBundler's FX graph cache; reduced bundle payload 46% (21.4 MB → 11.6 MB), eliminating 400 dead artifact files.
- Built Model Cache Manager for indexing, pruning, warming, and reusing compiled GPU kernel artifacts (Triton/Helion); unified cache trees under a single directory.
- Designed OCI-packaged kernel caches for portable, pre-warmed vLLM deployments, reducing cold-start overhead and simplifying artifact distribution across environments.
- Presented cache-management work at DevConf.US 2025 and Triton Developer Conference 2025.
- Automated Red Hat hardware certification pipeline using bootable containers and CI/CD workflows.
Founder & Lead Engineer
- Shipped a portfolio of Android products reaching 170M+ combined downloads across 190+ countries, including WiFi WPS WPA Tester (160M+), WeeNet (5M+), Wpa Calculator (5M+), and Ruppu (100K+).
- Owned end-to-end product delivery across client, backend, infrastructure, analytics, and monetization systems.
- Co-founded WeeNet (Spaghetti Code Labs LLC) with Prof. Flavio Esposito at Saint Louis University — a network utility suite that grew to 5M+ downloads.
- Built ip-neigh-sdk30, an Android JNI library to recover ARP table retrieval for apps targeting SDK 30+, after Google blocked netlink socket binding.
- Reported two AOSP PendingIntent vulnerabilities to Google via the Android VRP: ManagedProvisioning callback interception and DeviceAsWebcam activity hijack via
fillIn()injection.
Graduate Research Assistant — Computer Science
- First-authored IEEE NetSoft 2025 paper on eBPF/XDP-based mitigation for 802.11 de-auth DoS attacks in the mac80211 Linux kernel module.
Helion Committer
Autotuning strategies, ephemeral candidate caches for vLLM bloat mitigation, backend-aware cache keying, and deployment workflow improvements across several merged PRs.
View commitsPyTorch Contributor
Upstream contributor to torch.compile/Inductor autotuning pipeline; pruned dead autotuning artifacts from TritonBundler FX graph caches, reducing serialized payloads by 46%.
github.com/pytorch/pytorchWiFi WPS WPA Tester
Android security tool with 160M+ downloads. Founder and lead developer since 2014. Italy's #2 app publisher by downloads on Google Play.
Google Play StoreWeeNet
Network utility suite with 5M+ downloads. WiFi scanner, device discovery, speed testing, Wake On LAN, ping, traceroute, port scanning, and intruder detection. Co-founded with Prof. Flavio Esposito at Saint Louis University. Featured in SLU News.
Google Play StoreRuppu
Productivity app with 100K+ downloads. Pin notes, links, PDFs, audio, checklists, and location to your notification shade. Name from Sicilian dialect for "knot." Also available as a web app.
Google Play Storeip-neigh-sdk30
Android JNI library that recovers ARP table retrieval for apps targeting SDK 30+, bypassing Google's netlink socket bind restriction via RTNetlink dump requests without binding. Later blocked by SELinux policy updates.
github.com/fulvius31/ip-neigh-sdk30Android VRP
Reported two AOSP PendingIntent vulnerabilities to Google. Read more on the blog.
2025
Real-time, in-kernel defense against 802.11 de-auth floods using eBPF/XDP hooks in the mac80211 subsystem.
2025
2025
2025
2026
2025
2019
Android-based platform enabling haptic device connectivity for K-12 Physics education, with open-source haptic emulations and instrumented network metrics.
2025
2026
2026
2026