Harden browser WebAssembly modules with wasm-bindgen boundary validation, CSP wasm-unsafe-eval, SRI integrity, COOP/COEP isolation, and Rust-side input/pointer checks. Use when building or reviewing Rust-to-WASM modules that run in browsers.

Browser WASM Security Developer

Harden server-side WebAssembly on WASI, Wasmtime, WasmEdge, Cloudflare Workers, and Fastly Compute with least-privilege preopens, scoped network capabilities, platform secret bindings, and audited host functions. Use when deploying WASM on servers or edge.

Server-Side WASM Security Developer

Implement WebAssembly cryptography with constant-time Rust primitives via the subtle crate, zeroize key memory, platform CSPRNG via getrandom, and dudect timing validation. Use when building AEAD, signing, or KDF routines inside WASM modules.

WASM Cryptography Implementer

Audit WebAssembly linear-memory safety with checked wasm32 boundary arithmetic, wasm-bindgen slice validation, unsafe-block review, and fuzzing of JS/WASM interfaces. Use when reviewing Rust unsafe code or wasm-bindgen boundaries in WASM modules.

WASM Memory Safety Engineer

Harden WebAssembly supply chains with cargo audit/deny, registry pinning against dependency confusion, reproducible Rust-to-WASM builds, and Sigstore-signed artifact verification. Use when securing Rust-to-WASM build pipelines or deploying WASM binaries.