Sarah Jamie Lewis

I am an anonymity & privacy researcher working on projects that help people take control of their own security.

I have worked on preventing fraud through adversarial machine learning, discovering & exploiting weaknesses in telephony & networking protocols and have conducted multiple security assessments of large ecommerce sites and backend systems.

I publish articles about the the security of the Dark Web through - an independent organization which researches and publishes news articles and technical reports on anonymity, privacy and security in order to help activists, journalists and others protect themselves online and off. I also tweet about my daily discoveries & thoughts.

Security Consulting

I am available for security related freelance work, helping your organization with:

  • Application Security Assessments
  • Vulnerability Analysis
  • Preventing Fraud
  • Threat Modeling Sessions
  • Code Reviews
  • Security Training: Awareness, Tools & Techniques

Please get in touch via email:

Other Contact Information

Open Source Development

I work on a wide variety of free software projects, focused on privacy, anonymity and security. The largest project I work on is OnionScan; a tool for investigating the Dark Web. OnionScan hunts down deanonymization vectors in hidden services and alerts the user when their site is unsafe. (media mentions)

I am very interested in private instant messaging. I have contributed to Ricochet and I maintain go-ricochet, an implementation of the Ricochet protocol, written in go.

I also want to destroy passwords. To that end I wrote Bounce a new user authentication method, based on Tor hidden services & Ricochet.


I regularly give public talks about the dark web, privacy, information security and fraud. If you would like me to give a talk at your conference or event, please get in touch via email:

2018 Talks

2017 Talks

Talks in 2016