Maxim Menshikov
Cybersecurity expert, static analysis researcher, founder of Interpretica
I build tools that find real bugs, vulnerabilities, and reliability issues in large production codebases. My work spans static analysis frameworks, compilers and development tools, distributed testing, and deep reverse engineering (some older results are on my @ultrashot GitHub account).
This is not just theory. Across nearly two decades I've shipped software to hundreds of thousands of devices, including embedded systems, networking products, and security-critical software, and led large, long-running projects end to end. Based in Porto, Portugal, I work with engineering teams across Europe and worldwide.
Shipping software since 2006, from firmware to analyzers.
Catalogued on this site, commercial and open source.
Peer-reviewed work on static analysis and tooling.
Running software I shipped, in production.
Expertise
What I do
Industrial-grade analyzers that surface real defects in large codebases.
2 CybersecurityFinding and eliminating real vulnerabilities in production systems.
3 Reverse engineeringUndocumented platforms, binaries and protocols.
4 Development toolsCompilers, IDEs, debuggers and build systems.
5 Embedded & software testingTesting strategies for complex software, embedded systems, and production environments.
Interpretica
Founder
I founded Interpretica to bring deep software testing and analysis into real-world engineering teams. We help companies working with complex software systems discover vulnerabilities, prevent failures, and improve reliability through static analysis, cybersecurity testing, and engineering expertise.
How I can help you
From scratch to maintenance
You describe the problem, the constraints and what "done" looks like. I ask the uncomfortable questions early, while they are still cheap.
A concrete plan: scope, milestones, risks and what we deliberately leave out. Estimates you can hold me to.
Any method, any complexity: firmware and drivers, compilers and analyzers, network stacks, cloud backends. From scratch or inside your existing codebase.
I bring the tooling: the ts-factory Test Environment for deterministic multi-device testing, static analysis built on Midair and Visao, and test suites written for your system. Evidence, not a green badge.
Reproducible builds, containers, CI, staged rollout to real devices and servers, with a rollback path that has actually been tried.
I stay with the project: monitoring, fixes, upgrades and the next round of features. Long-term work is where I do my best.
Facts
Track record
I've shipped hundreds of tools and systems that run in production on hundreds of thousands of devices.
I've led and contributed to large-scale engineering projects involving many developers and complex codebases.
I specialize in long-term technical challenges where understanding the entire system matters.
I research and build static analyzers and security tooling that tackle real industrial problems.
Skills & interests
Stack and research
- Static analysis & security tooling
- System programming (C/C++, Rust)
- Reverse engineering
- Embedded software
- Compiler technologies
- Improving static analysis
- Development tools (IDEs, compilers, debuggers, …)
- High-performance computing, networks and virtualization
Recent posts
Writing
- Changing landscape
- A library for parsing printf format
- CMake to Microchip Studio project file generation
- Cognitive load reduction as a debugging aid