Who is Alessandro Sangiorgi?

Note: This is Alessandro Sangiorgi the software engineer (born in Sicily, based in Texas, works at Red Hat). Not Alessandro Sangiorgi the Italian football player, and not Alessandro Sangiorgi the Italian orchestra conductor.

Quick Facts

What does Alessandro Sangiorgi do at Red Hat?

Alessandro works in Red Hat's Office of the CTO on GPU kernel optimization for AI/ML inference. He is a committer on Helion, a PyTorch project for GPU kernel generation. He authored the FROM_BEST_AVAILABLE autotuning strategy (now the default for quick-effort runs), mitigated vLLM autotuning cache bloat via ephemeral candidate caches, and contributed upstream to PyTorch's torch.compile/Inductor pipeline — reducing TritonBundler FX graph cache payloads by 46%. He also built the Model Cache Manager for indexing, pruning, and reusing compiled GPU kernel artifacts, and designed OCI-packaged kernel caches for portable vLLM deployments.

What is Sangiorgi SRL?

Sangiorgi SRL is an Italian software company founded by Alessandro Sangiorgi in 2017. Its flagship product, WiFi WPS WPA Tester, is an Android security tool that has surpassed 165 million downloads. The company is the 2nd largest Italian app publisher by number of downloads on the Google Play Store, with 170M+ combined downloads. Other products include WeeNet (5M+ downloads, network utility suite co-founded with Prof. Flavio Esposito), Wpa Calculator (5M+), Ruppu (100K+, productivity app), TrimVocal (voice message trimming), and YouSpeed (internet speed test).

Education

Press and Recognition

Publications and Talks

Technical Skills

GPU and ML Systems: Triton, Helion, PyTorch, torch.compile/Inductor, GPU kernel optimization, autotuning, kernel caching, model serving with vLLM, GPU profiling. Languages: Python, C, Java, Bash. Infrastructure: Linux, Docker, OCI images, Kubernetes, OpenShift, GitHub Actions, GitLab CI, eBPF/XDP. Mobile: Android SDK/NDK, JNI, app security, vulnerability research.

Security Research

Android VRP: Reported two AOSP PendingIntent vulnerabilities to Google — ManagedProvisioning callback interception and DeviceAsWebcam activity hijack via fillIn() injection.

Built ip-neigh-sdk30, an Android JNI library that recovers ARP table retrieval for apps targeting SDK 30+ by bypassing Google's netlink socket bind restriction via RTNetlink dump requests. Ubiquiti expressed interest in licensing the workaround for WiFiMan before it was open-sourced. Later patched by SELinux policy updates on Android 12+. Source: github.com/fulvius31/ip-neigh-sdk30

Contact Alessandro Sangiorgi

Email: [email protected] | GitHub: github.com/fulvius31 | LinkedIn: linkedin.com/in/alessandro-sangiorgi-9321a7108 | Company: sangiorgisrl.com

Alessandro
Sangiorgi

GPU Performance Engineer & Upstream ML‑Systems Contributor

🇮🇹 From Militello in Val di Catania, Sicily — based in Dallas‑Fort Worth, TX, USA

Helion committer shipping code in PyTorch, Triton, and Helion at Red Hat's Office of the CTO. Published at IEEE NetSoft, IEEE WETICE, and ACM MobiSys. Android security researcher with two AOSP vulnerabilities reported to Google. Founder of Sangiorgi SRL — Italy's #2 app publisher by downloads on Google Play, with 170M+ installs worldwide. M.S. in Computer Science, 3.93 GPA.

GitHub LinkedIn Resume Sangiorgi SRL Email Instagram
alessandro@etna:~
Career
Experience
Red Hat
May 2024 — Present
Remote, USA
Emerging Technologies — Office of the CTO
Senior Software EngineerApr 2026 — Present
  • Helion (PyTorch project) committer; authored FROM_BEST_AVAILABLE, now the default autotuning bootstrap for quick-effort runs, reusing prior good configurations to reduce unnecessary recompilation and improve iteration speed.
  • Mitigated vLLM autotuning cache bloat (tens of GB on tmpfs, causing system freezes) via ephemeral candidate caches that discard losing kernels and recompile only the winner.
  • Upstream PyTorch PR stripping losing candidates from TritonBundler's FX graph cache; reduced bundle payload 46% (21.4 MB → 11.6 MB), eliminating 400 dead artifact files.
Software EngineerJan 2025 — Apr 2026
  • Built Model Cache Manager for indexing, pruning, warming, and reusing compiled GPU kernel artifacts (Triton/Helion); unified cache trees under a single directory.
  • Designed OCI-packaged kernel caches for portable, pre-warmed vLLM deployments, reducing cold-start overhead and simplifying artifact distribution across environments.
  • Presented cache-management work at DevConf.US 2025 and Triton Developer Conference 2025.
Software Engineer InternMay 2024 — Nov 2024
  • Automated Red Hat hardware certification pipeline using bootable containers and CI/CD workflows.
Sangiorgi SRL
Sep 2017 — Present
Italy
Founder & Lead Engineer
  • Shipped a portfolio of Android products reaching 170M+ combined downloads across 190+ countries, including WiFi WPS WPA Tester (165M+), WeeNet (5M+), Wpa Calculator (5M+), and Ruppu (100K+).
  • Owned end-to-end product delivery across client, backend, infrastructure, analytics, and monetization systems.
  • Co-founded WeeNet (Spaghetti Code Labs LLC) with Prof. Flavio Esposito at Saint Louis University — a network utility suite that grew to 5M+ downloads.
  • Built ip-neigh-sdk30, an Android JNI library to recover ARP table retrieval for apps targeting SDK 30+, after Google blocked netlink socket binding.
  • Reported two AOSP PendingIntent vulnerabilities to Google via the Android VRP: ManagedProvisioning callback interception and DeviceAsWebcam activity hijack via fillIn() injection.
Saint Louis University
Jan 2023 — Aug 2024
Saint Louis, MO
Graduate Research Assistant — Computer Science
  • First-authored IEEE NetSoft 2025 paper on eBPF/XDP-based mitigation for 802.11 de-auth DoS attacks in the mac80211 Linux kernel module.
Live from GitHub
Open Source Activity
Loading profile…
Loading repositories…
Contributions
Key Projects
Helion Committer
Autotuning strategies, ephemeral candidate caches for vLLM bloat mitigation, backend-aware cache keying, and deployment workflow improvements across several merged PRs.
View commits
PyTorch Contributor
Upstream contributor to torch.compile/Inductor autotuning pipeline; pruned dead autotuning artifacts from TritonBundler FX graph caches, reducing serialized payloads by 46%.
github.com/pytorch/pytorch
WiFi WPS WPA Tester Author
Android security tool with 165M+ downloads. Founder and lead developer since 2014. Italy's #2 app publisher by downloads on Google Play.
Google Play Store
WeeNet Author
Network utility suite with 5M+ downloads. WiFi scanner, device discovery, speed testing, Wake On LAN, ping, traceroute, port scanning, and intruder detection. Co-founded with Prof. Flavio Esposito at Saint Louis University. Featured in SLU News.
Google Play Store
Ruppu Author
Productivity app with 100K+ downloads. Pin notes, links, PDFs, audio, checklists, and location to your notification shade. Name from Sicilian dialect for "knot." Also available as a web app.
Google Play Store
ip-neigh-sdk30 Author
Android JNI library that recovers ARP table retrieval for apps targeting SDK 30+, bypassing Google's netlink socket bind restriction via RTNetlink dump requests without binding. Later blocked by SELinux policy updates.
github.com/fulvius31/ip-neigh-sdk30
Android VRP
Reported two AOSP PendingIntent vulnerabilities to Google. Read more on the blog.
Research & Talks
Publications
Press
2026
Sangiorgi SRL: Turning Free Apps Into a Global Success Story
Featured by Google — Publisher Success Story. The origin and growth of WiFi WPS WPA Tester (165M+ downloads) and Sangiorgi SRL, building free, ad-supported security and productivity apps used across 190+ countries.
IEEE
2025
Mitigating De-authentication DoS Attacks in 802.11 via eBPF and XDP
A. Sangiorgi, F. Esposito, A. Pinto, R. Tourani — IEEE NetSoft 2025. First author.
Real-time, in-kernel defense against 802.11 de-auth floods using eBPF/XDP hooks in the mac80211 subsystem.
IEEE
2025
Quantifying Privacy Risk in Online Agreements with COAT: An LLM Approach
IEEE WETICE 2025. Co-author. LLM-based framework for automated privacy risk scoring of Terms of Service documents.
Talk
2025
From Cold Start to Warp Speed: Triton Kernel Caching with OCI Container Images
Speaker — DevConf.US 2025. OCI-packaged pre-compiled Triton kernel caches eliminating cold-start latency in vLLM deployments. Watch the recording.
Poster
2025
Tame the GPU Kernel Chaos and Take Control in Triton-Based Systems
Triton Developer Conference 2025. Cache management tooling for Triton-based ML inference pipelines at production scale.
Blog
2026
Blog
2025
ACM
2019
Propelling Haptic Devices into the Mobile World to Advance K-12 STEM Learning
A. Sangiorgi, F. Esposito, J. Gorlewicz, G. Schembra — ACM MobiSys 2019. First author.
Android-based platform enabling haptic device connectivity for K-12 Physics education, with open-source haptic emulations and instrumented network metrics.
Grant
2025
NGI Sargasso Winner — €100k EU Grant for COAT
Awarded through Sangiorgi SRL for the COAT privacy platform.
Writing
Latest from the Blog
Jun
2026
Unboxing Two DGX Sparks, and Recovering One From a Kernel Panic on First Boot
The DGX Spark setup is a phone-style hotspot-and-wizard flow that pulls down new software and firmware over Wi-Fi. On one of my two units that update left me staring at 'Unable to mount root fs on unknown-block(0,0)'. Here's the out-of-box experience, and exactly how I recovered the bricked one — including where my recovery diverged from NVIDIA's official guide.
Jun
2026
Wiring Two DGX Sparks: One Script to Detect, Configure, and Validate the RoCE Link
You cabled two DGX Sparks together with the ConnectX-7 stacking cable. Now: is the link actually at line rate, or silently firmware-throttled? Are your collectives on RDMA, or quietly falling back to TCP? Which of the FOUR RoCE devices is even the live one — and why is it named differently on each box? Here is a single self-contained bash script that detects every port from sysfs, installs the tooling, and validates the link end-to-end (bandwidth, latency, and a real NCCL all-reduce over RoCE) with green/red gates — plus the traps it encodes. Measured on two GB10 Sparks: 109 Gbps/rail, 1.45 µs RDMA, 29.5 µs small-message all-reduce.
Jun
2026
The Number Nobody Published: Small-Message NCCL Latency Between Two DGX Sparks
Every dual-DGX-Spark writeup benchmarks bandwidth — GB/s of busbw, ~190 Gbps of RDMA. None of them publish the one figure that actually decides whether a latency-bound multi-node workload is viable: the small-message NCCL all-reduce latency over the ConnectX-7 RoCE link. So I measured it on two GB10 Sparks: ~2 µs RDMA write floor, and ~40 µs for a 16–32 KB all-reduce. Plus the firmware, NCCL, and OpenMPI traps that silently wreck the result.
View all posts →
Stack
Skills
GPU & ML Systems
Triton
Helion
PyTorch
torch.compile
Inductor
Autotuning
Kernel Caching
vLLM
GPU Profiling
Languages
Python
C
Java
Bash
Infrastructure
Linux
Docker
OCI Images
Kubernetes
OpenShift
GitHub Actions
GitLab CI
eBPF/XDP
Mobile
Android SDK/NDK
JNI
App Security
Vulnerability Research
Education
Degrees
Saint Louis University
Dec 2024
Saint Louis, MO
M.S. in Computer Science — GPA 3.93 / 4.00
U. of Catania & eCampus
Mar 2021
Catania, Italy
B.S. and M.S. in Computer Engineering