Felix Novak
Security Engineer
At EveryInfra Felix owns the allowlist for incoming requests, edge caching rules and API key leak scanning.
Education
- TU Wien, B.S. Computer Science (2008–2012)
- TU Wien, M.S. Computer Science, security (2012–2014)
Previous roles
- Cloudflare (Lisbon / remote) — Security Engineer → Senior (2015–2024)
Articles by Felix Novak
- TikHub API Token and the API Helper Skill: An AI Agent Test
The community TikHub API Helper ships a stale snapshot: 25.7% of its paths are gone. We test token setup, rate limits, AI agent calls and price.
- 42 Days From First Exploit to KEV: Where the Signal Was
A Nextcloud Collabora flaw was exploited 42 days before CISA listed it in KEV. We traced the first public signal and measured X and Reddit. 93.4% was noise.
- How to Turn Vulnerability Intelligence into an Actionable Product: From Alert Lists to Remediation Queues
Vulnerability intelligence APIs only provide candidate risks. This article discusses how to combine assets, dependency scopes, reachability, in-the-wild exploitation, and fixed versions to turn security alerts into actionable, closable engineering tasks.
- AI crawlers are not uniform traffic: how websites can determine access scopes
Starting from Cloudflare's 2026 AI access categorization changes, differentiate search, training, and immediate user visits to understand the boundaries between robots.txt, actual access control, and search performance.