Hi,

I'm Tyler Imanian, a security architect. I research how risk moves between connected systems, from the water and power networks cities depend on to the AI now being built into them.

Most of my work is helping large organizations decide which risks matter. The pattern I keep running into is that the dangerous risks usually aren't unknown. They're known, written down, and ranked too low.

When Richmond's water system failed in January 2025, and when Texas lost power and then water in 2021, the warnings were already on record. What broke was how those risks were framed and prioritized, long before anyone got around to fixing them. My first paper looks at exactly that.

The problem gets harder as systems depend on each other and on AI. A risk assessment usually stops at the edge of one organization. Failures don't. That's where my research is heading next: how to threat model machine learning systems, and how known vulnerabilities get lost between the teams that find them and the teams that respond to them.

This site is where I'll write about all of it. You can follow along through the writing page or the RSS feed, see what I'm working on, or email me.