Erlend Oftedal
Oslo, Norway
Summary
🤩
RockstarErlend Oftedal is a Senior Technical Director and experienced application security researcher with 16 years of hands-on experience across JavaScript/TypeScript, .NET and Java stacks, spanning frontend and backend development. He blends practical secure SDLC, architecture and advisory work with M&A-focused security due diligence, and has led security teams and practices at organizations from startups to enterprise and PE-backed labs. A prolific conference speaker and head of OWASP Norway since 2011, he’s known for translating deep technical findings into clear guidance for developers and executives alike. Erlend contributes to notable open-source security tooling—most visibly enhancing the Retire.js browser extension to surface vulnerable JS libraries and generate SBOMs—highlighting his focus on developer-facing security. Based in Oslo, he combines rigorous academic training (MSc CS, NTNU) with a rare mix of public-facing advocacy, community leadership, and productized security engineering.
16 years of coding experience
Stackoverflow
4,386reputation
1.1mreached
159answers
6questions
security
top-5%
parsing
top-5%
xss
top-1%
Github Skills (16)
opera-extension10
javascript10
user-interface10
webextension10
chrome-extension10
xss10
browser-extension10
security9
parsing9
html9
css8
iframe6
asp-net6
php6
escaping6
Programming languages (18)
Github contributions (5)
RetireJS/retire.js
Aug 2013 - Jan 2023
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
Role in this project:
Front-end Developer
Front-end DeveloperContributions:30 releases, 19 reviews, 560 commits in 9 years 5 months
Contributions summary:Erlend primarily contributed to the Chrome extension functionality of the `retire.js` repository, focusing on the user interface and interaction design. The commits involve changes to `chrome/js/sandbox.js`, `chrome/js/content.js`, `chrome/popup.js` and the related HTML files, and aim to enhance the user's experience by showing vulnerabilities in the browser's extension console. There were also modifications for browser specific functionality related to add on.
javascriptsbomvulnerabilitiesscannerfirefox-extension
eoftedal/ContentSecurityPolicy.Net
Apr 2011 - Aug 2012
Contributions:21 commits in 1 year 5 months
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.