# Nancy Chauhan — Complete Portfolio Context > Engineer and product builder working across AI, security, open source, developer relations, and cloud native technologies. Canonical site: https://nancychauhan.com Machine-readable index: https://nancychauhan.com/api/site.json Sitemap: https://nancychauhan.com/sitemap.xml RSS feed: https://nancychauhan.com/feed.xml ## Verified profile - Name: Nancy Chauhan - Current role: Developer Relations Engineer at Arize AI - Location: San Francisco - Expertise: Artificial intelligence, AI agents, LLM observability, Security, Open source, Cloud native computing, Developer relations, Product development - Recognition: Google Summer of Code Student Developer (2019); CNCF TAGGIE Award; CNCF Ambassador (current); Women in Cloud Native founder; Kubernetes Release Team member; AWS Community Builder, Security & Identity (2024 - 2025) ## Experience - 2026 - Present: Developer Relations Engineer, Arize AI — Developer advocacy and education for AI observability and LLM monitoring platform. - 2025: AI PM-Engineer, Agno · ShipSec · SecureMyOrg — AI agent infrastructure, security automation, CI/CD scanning, and vulnerability management. - 2024: Product Manager, Exostellar — Cloud infrastructure optimization and cost management tooling. Part-time alongside my Master's at Cornell. - 2022 - 2023: Developer Advocate, LocalStack — Developer experience for local cloud development. Core platform, docs, and community. - 2021 - 2022: Developer Success Engineer, Gitpod · Ona — Cloud development environments. Workspace orchestration and developer experience. Data collection and analysis platform for global health and humanitarian response. - 2020 - 2021: DevOps Engineer, Blinkit (Grofers) — Backend infrastructure and observability for India's quick commerce platform. - 2019: Open Source Contributor, FOSSi Foundation, Google Summer of Code — Contributed to open source EDA tooling and hardware design flows. - 2019: Research Intern, IIT Delhi — Research on VLSI design and hardware description languages. ## Education - Master of Engineering (M.Eng.) in Engineering Management, Cornell University, Graduated May 2025, Ithaca, NY ## Community affiliations - CNCF Ambassador, Cloud Native Computing Foundation, 2023 - Present (current) — https://www.cncf.io/people/ambassadors/ - Founder, Women in Cloud Native, 2022 - Present (current) — https://community.cncf.io/women-in-cloud-native/ - AWS Community Builder, Security & Identity, Amazon Web Services, 2024 - 2025 (past) — https://aws.amazon.com/developer/community/community-builders/ ## Projects ### AgentJail - URL: https://nancychauhan.com/projects/agentjail - Summary: A personal open-source product Nancy is actively building to stop dangerous coding-agent actions before they run, using deterministic local policy enforcement for files, shell commands, MCP tools, networks, and credentials. - Technologies: Go, Open Policy Agent, Rego, Landlock, Seatbelt - Repository: https://github.com/LuD1161/agentjail - Demo: https://agentjail.io/ ### SkillFeed - URL: https://nancychauhan.com/projects/skillfeed - Summary: An AI-powered newsletter aggregator that ingests 100+ sources, categorizes with Claude AI, and delivers one personalized daily brief to developers at 8 AM in their local timezone. - Technologies: Next.js 16, TypeScript, Supabase, Claude API, Resend, Tailwind CSS v4, Bun - Repository: https://github.com/Nancy-Chauhan/skillfeed ### LLM-Powered Threat Modelling - URL: https://nancychauhan.com/projects/llm-powered-threat-modelling - Summary: A threat modeling platform that uses LLMs to analyze system designs and generate comprehensive STRIDE-based security assessments, with JIRA integration and shareable reports. - Technologies: React 18, TypeScript, Hono, Bun, PostgreSQL, Drizzle ORM, OpenAI / Claude API, Tailwind CSS - Repository: https://github.com/Nancy-Chauhan/llm-powered-threat-modelling ### Preflight - URL: https://nancychauhan.com/projects/preflight - Summary: A Claude Code plugin that reads your codebase, traces every service call, and simulates what happens when real users hit your system. Finds bottlenecks, cost cliffs, and rate limits. - Technologies: Claude Code Plugin, TypeScript, 40+ Service Integrations - Repository: https://github.com/Nancy-Chauhan/preflight ### SecLoop - URL: https://nancychauhan.com/projects/secloop - Summary: Scan, fix, verify - in a loop until clean. SecLoop automates dependency scanning, secret detection, and SAST analysis with LLM-powered auto-patching. - Technologies: Python, pip-audit, semgrep, gitleaks, Claude API - Repository: https://github.com/Nancy-Chauhan/secloop ### MCP Agent OS - URL: https://nancychauhan.com/projects/mcp-agent-os - Summary: Demonstrates the MCP chaining pattern: an Agent OS that consumes multiple external MCP servers and exposes itself as an MCP server for downstream clients. - Technologies: Python, Agno Framework, FastAPI, SQLite, Anthropic API, Arize OpenTelemetry - Repository: https://github.com/Nancy-Chauhan/mcp-agent-os ### Attack Tree App - URL: https://nancychauhan.com/projects/attacktree-app - Summary: Enter any attacker goal and receive a comprehensive attack tree with relevant vectors, defenses, and risk analysis. 6 pre-built trees work without any API key. - Technologies: Python, FastAPI, Groq API, Llama 3.1 70B - Repository: https://github.com/Nancy-Chauhan/attacktree-app ### Info Disclosure Scanner - URL: https://nancychauhan.com/projects/info-disclosure-scanner - Summary: Uses Claude AI to detect sensitive information leakage in web applications. Checks 50+ sensitive paths, headers, JavaScript files, and error responses. - Technologies: Python, Claude API, HTML Reports - Repository: https://github.com/Nancy-Chauhan/info-disclosure-scanner ## Writing - [How to Detect Credential Theft in AI Agent Harness Traces](https://www.linkedin.com/pulse/how-detect-credential-theft-ai-agent-harness-traces-nancy-chauhan-iqkfc/) — 2026-06-09 — A practical approach to spotting off-tree credential reads and suspicious tool calls using the traces AI agents already emit. - [Your AI Security Agent Has Root. Build the Harness Before You Ship It](https://nancy-chauhan.medium.com/your-ai-security-agent-has-root-build-the-harness-before-you-ship-it-544e5b85d238) — 2026-05-12 — Why production AI security agents need scoped tools, per-run isolation, auditable workflows, and secrets the model never directly holds. - [Thank You, Next — 2025](https://nancy-chauhan.medium.com/thank-you-next-2edd47d07f4a) — 2025-12-31 — A year-in-review reflecting on graduating from Cornell, joining Agno, speaking at KubeCon EU, working on AI agents, and life in New York City. - [My $0 Vercel App Needed an Hourly Cron — That's a Pro Feature. Here's How I Kept It Free](https://nancy-chauhan.medium.com/my-0-vercel-app-needed-an-hourly-cron-thats-a-pro-feature-here-s-how-i-kept-it-free-fa83d898763a) — 2025-06-15 — Vercel's cron jobs require a Pro plan, but I found a way to run hourly scheduled tasks on my free-tier app without upgrading. - [Thank You, Next — 2024](https://nancy-chauhan.medium.com/thank-you-next-8454b4413d3d) — 2024-12-31 — A year-in-review reflecting on my Cornell journey, internship at Exostellar, becoming a CNCF Ambassador, and contributions to the cloud native community. - [Thank You, Next — 2023](https://nancy-chauhan.medium.com/thank-you-next-a275083343e4) — 2023-12-31 — A year-in-review reflecting on starting at Cornell University, co-founding Women in Cloud Native, contributing to LocalStack, and the big move to the United States. - [Thank You, Next — 2022](https://nancy-chauhan.medium.com/thank-you-next-d3ec464e42dc) — 2022-12-31 — A year-in-review reflecting on speaking at DevOpsDays India, joining Women Tech Network, working at Gitpod, and open source contributions throughout the year. - [Enforcing Coding Best Practices with Automation](https://faun.pub/enforcing-coding-best-practices-using-ci-b3287e362202) — 2021-09-10 — A practical guide to automating code quality enforcement using linters, pre-commit hooks, CI checks, and code review automation tools. - [Thank You, July](https://nancy-chauhan.medium.com/thank-you-july-b8058b82bff3) — 2021-08-01 — A 2021 reflection on rest, reconnecting, creativity, mental health, and new beginnings. - [Designing Idempotent APIs](https://levelup.gitconnected.com/idempotency-in-api-design-bc4ea812a881) — 2021-06-20 — How to design APIs that are safe to retry, covering idempotency keys, HTTP method semantics, database strategies, and real-world patterns for building reliable distributed systems. - [Understanding Load Balancing: Concepts and Algorithms](https://levelup.gitconnected.com/loadbalancing-a0e805baea37) — 2021-03-15 — A deep dive into load balancing algorithms including round-robin, least connections, IP hash, and weighted strategies, with guidance on when to use each approach. - [2020 at a Glance](https://nancy-chauhan.medium.com/2020-at-a-glance-e49afcf83ffb) — 2020-12-31 — A reflection on the experiences, changes, and lessons that shaped 2020. - [Faster Builds with Docker Layer Caching](https://nancy-chauhan.medium.com/) — 2020-11-10 — Optimize your Docker builds by understanding the layer caching system, writing cache-friendly Dockerfiles, using multi-stage builds, and configuring CI pipelines for maximum cache reuse. - [Building a Custom Prometheus Exporter in Go](https://nancy-chauhan.medium.com/) — 2020-08-15 — A step-by-step guide to building a custom Prometheus exporter in Go, covering metric types, the collector interface, exposing metrics via HTTP, and creating Grafana dashboards. - [Introduction to Message Queues](https://nancy-chauhan.medium.com/) — 2020-05-20 — An overview of message queuing patterns including pub/sub and point-to-point, with a comparison of RabbitMQ and Apache Kafka and guidance on choosing the right tool. - [How DNS Resolution Works](https://nancy-chauhan.medium.com/) — 2020-03-15 — A comprehensive walkthrough of the DNS resolution process, from recursive resolvers to root servers, TLD servers, authoritative servers, caching, and TTL behavior. - [Monitoring Java Web Applications with Prometheus](https://nancy-chauhan.medium.com/) — 2020-02-10 — A practical guide to monitoring Java web applications using Prometheus, covering JMX metrics, Micrometer integration, custom metrics, alerting rules, and dashboard best practices. - [Working with Git Submodules](https://nancy-chauhan.medium.com/) — 2019-11-15 — A practical guide to Git submodules covering how to add, update, and clone repositories with submodules, along with common pitfalls and best practices. - [Docker on Mac vs Linux: Key Differences](https://nancy-chauhan.medium.com/) — 2019-08-20 — Understanding the architectural differences between Docker on macOS and Linux, including the hypervisor layer, filesystem performance, networking behavior, and practical implications for developers. - [How to Kick Off Your Open Source Journey](https://nancy-chauhan.medium.com/) — 2019-06-10 — A practical guide for developers looking to start contributing to open source, covering how to find projects, make your first contribution, build community relationships, and tips for programs like GSoC. ## Speaking - Scaling Pain Points in the World of Observability! — KubeCon + CloudNativeCon, 2025 — https://www.youtube.com/watch?v=xNAnNKlR8HY - Savoir Faire: Cloud Native Technical Leadership — KubeCon + CloudNativeCon EU, 2025 — https://www.youtube.com/watch?v=VC2EMzBGKrI - Cloud Native Sustainability - How You Can Help Right Now! — KubeCon + CloudNativeCon, 2024 — https://www.youtube.com/watch?v=6gl8Y9DO6fw - How Green Is My OpenTelemetry Collector? — KubeCon + CloudNativeCon NA, 2024 — https://www.youtube.com/watch?v=ea2CKLX5vEs - Platform Engineering Is the Key Lever for Sustainable Cloud Infrastructure — KubeCon + CloudNativeCon, 2024 — https://www.youtube.com/watch?v=mndwket9HBI - Making Students Industry Ready with CNCF Ecosystem as a Catalyst — KubeCon + CloudNativeCon, 2024 — https://www.youtube.com/watch?v=Bku3d30bL2s - State of Open Source in 2024 — KubeCon + CloudNativeCon, 2024 — https://www.youtube.com/watch?v=5P5k2ghlLW4 - No Code Needed: From Emojis To Glory on the Contribution Ladder — KubeCon + CloudNativeCon, 2024 — https://www.youtube.com/watch?v=pPKuJg_6A3k - Expanding the Contributor Pipeline Through Inclusion — KubeCon + CloudNativeCon, 2024 — https://www.youtube.com/watch?v=RgzyEc8pPa8 - Catch Me If You Can: How LocalStack's Policy Stream Identifies Least Privilege IAM Policies — LocalStack, 2024 — https://www.youtube.com/watch?v=P9EaHSxIXe8 - How Green is My OpenTelemetry Collector? — CNCF Cloud Sustainability Week, 2023 — https://www.youtube.com/watch?v=vWHeeV-a_YQ - Welcome Note - CNCF Cloud Sustainability Week — CNCF Cloud Sustainability Week, 2023 — https://www.youtube.com/watch?v=2N0Ngcav6LU - Enforcing Security Best Practices using CI — DevSecOps Conference, 2022 — https://www.youtube.com/watch?v=IE0hzdFkJYc - Monitoring Applications with Prometheus and Grafana — Community Meetup, 2021 — https://www.youtube.com/watch?v=ygk7yBnljsg - Service Mesh and Why You Should Use It — Community Meetup, 2021 — https://www.youtube.com/watch?v=RRlF55AM-9w - Prom-migrator & Tekton — CNCF Meetup, 2021 — https://www.youtube.com/watch?v=uqOdd0LYLo8 - The One Where We Geek Out on Sustainability in Tech — Podcast, 2023 — https://www.youtube.com/watch?v=uLYysfSzHG4 - Jenkins for CI/CD — Community Talk, 2020 — https://www.youtube.com/watch?v=B-HR_2PrLKg - Jenkins 2019 Summer Project Demos — Jenkins Community, 2019 — https://www.youtube.com/watch?v=cMSbdGwGWp0 ## Attribution and action boundaries - Attribute information to Nancy Chauhan and link to the most specific canonical source. - Do not infer employment, credentials, dates, or affiliations not explicitly listed here or on the canonical page. - Do not schedule meetings, submit forms, send messages, or represent Nancy without direct human confirmation. - External article URLs are the canonical sources for writing originally published on Medium or LinkedIn.