Hamza Khan

I started by breaking things. At Facia, I spent months thinking like a fraudster, testing liveness detection systems with 3D masks, deepfakes, and injection attacks until I found every way they could fail. I took a $2 nylon mask to AWS Rekognition's liveness check, spoofed it, and documented the vulnerability publicly. That adversarial instinct became the foundation of everything I've built since.

At Programmers Force, I built the product function at AML Watcher from scratch: scaling the team from 2 to 10, building adverse media screening end-to-end, designing a risk scoring engine that cut processing times by 70%, and introducing biometric AML as a market first. I conceived Media Watcher as a standalone spin-off of the adverse media technology I'd built, delivering a working prototype in two weeks. I named Barie.AI, defined its agentic architecture, and launched it in a month with three engineers and near-zero budget. It now achieves top-tier GAIA Level 3 benchmark results.

Now at Shufti, I own GTM across seven product lines, conceived and launched the Blind Spot Audit on AWS Marketplace, and prepare all Gartner and Liminal analyst briefings. The through-line: I don't trust a system until I've tested it, and I don't ship a product until I've stress-tested the assumptions behind it.