
Stefano Amorelli
Staff Software Engineer - AI - Cybersecurity
Tallinn, Estonia
Actions
Stefano Amorelli is a software engineer and lead with 8+ years of experience in hands-on leadership positions for start-ups and scale-ups across the USA and Europe.
Area of Expertise
Topics
Test smarter, not harder with AI-Augmented TDD
TDD—you either hate it or love it. For some, it’s a must; for most, is a nightmare.
In this talk, I’ll share how I experimented with TDD in my own work—facing the same frustrations and failures that many of us do. We’ll tackle these struggles head-on and solve them live, using different LLMs techniques.
We’ll do hands-on live coding for each different approach, showing what works and what doesn't, and how AI can help us write smarter tests, refactor code, and even predict failures, ultimately making you fall in love with TDD.
But that's not it: we'll end up unleashing Agentic AI to show how autonomous systems can take our testing workflow to a whole new level.
This isn’t just a talk—it’s a hands-on, game-changing look at how you can make TDD faster, smarter, and actually, enjoyable!
Practical Exploitation of Agentic AI with Data-Poisoning
Agentic AI is like a superhero—autonomous, powerful, and built to solve our problems.
But even superheroes have weaknesses, and for AI, one it’s data poisoning.
In this speech, we’ll explore how poisoning attacks take advantage of AI’s dependence on data to manipulate its decisions and turn trusted systems into unexpected, dangerous, threats.
Come with me as we demonstrate how these attacks work, why they matter, and what we can do to protect our AI-driven future.
State of State-Management: Practical Comparison in Flutter
Navigating Flutter state management can feel like picking a movie on a Friday night - so many choices, but which one's the best? Join me in this workshop, as we rerun the same app plot using four starring architectures: BLoC, Riverpod, MobX, and Stacked (MVVM)
As we develop the same app through each methodology, we'll demonstrate the strengths and drawbacks inherent to each approach, giving us a comprehensive understanding of which technique best suits your unique needs
Key Takeaways:
- Deep dive into Flutter's BLoC, Riverpod, MobX, and Stacked (MVVM) state management tools;
- Real-world example analysis of each method's best practices, strengths, and weaknesses;
- Guided insights to help pick the best state management for your project's needs.
AI-Powered Flutter Development
"AI won't take your job, it's somebody using AI that will take your job." - Richard Baldwin (World Economic Forum 2023)
In this very hands-on lighting talk, I'll uncover my secrets on how I made the development process of Flutter applications more efficient, reliable, and fun.
We'll go through 11 practical examples leveraging ChatGPT and several different AI tools and strategies applied explicitly to Flutter.
Join me as I unveil scripts, prompts, and custom-made secret tools that have remained under the radar until now.
Walk away with tangible assets that can elevate your development game today!
Case Study: FinTech App Development in Flutter
Let's dive into building FinTech Flutter applications for processing credit card payments from scratch!
We'll talk about the cybersecurity implications in developing applications in a high-regulated industry.
In this session we'll talk about:
- DevSecOps in Flutter.
- Designing and Implementing a Reliable Architecture.
- Production SRE in Flutter applications.
Delivered at: DroidconKE 2023
Credit cards tech and threats: how hackers pay with your money
Ever wondered what makes your payment cards tick?
Who's lurking in the shadows, ready to wreak havoc on your transactions?
Let's dive into the fascinating world of payment card technology, exposing both its inner workings, secrets, and how some gentlemen are trying to mess with these systems (and you).
Delivered at: BSides Tallinn 2023
Ooops... AI did it again! Predictive Incident Management with LLMs
It’s incident time! But what is the best thing about incidents? They bring a lesson to be learned!
LLMs are here to be our post-incident detectives and fortune-tellers, analyzing logs, predicting failures, and whispering solutions before chaos strikes (again).
With AI by our side, every incident becomes an opportunity for smarter, smoother systems.
DevOps & AI Latvia - Jan 2025
Hands-on OWASP Top 10 for LLMs
Everyone talks about AI; let’s focus on how to break it.
In this session we'll uncover the new OWASP Top 10 vulnerabilities specific to large language models, detailing critical security issues like prompt injection and data poisoning.
We'll delve into practical insights and examples for professionals to better understand the modern security landscape of LLMs.
Delivered at: OWASP Riga - inauguration event 2024
Practical Hacking LLMs - Workshop
Last year, at BSides Tallinn 2023, we demonstrated how to exploit ChatGPT on prod.
This year, we'll dive deeper into more real-world LLM vulnerabilities.
In this workshop we'll target some LLMs and exploit the h$ll out of them.
Get your laptop ready for this hands-on workshop!
Delivered at: BSides Tallinn 2024
Exploiting ChatGPT on production
Join me on the dark side: in this hands-on speech, we'll delve into AI vulnerabilities, exploring the OWASP Top 10 for LLMs (released this year) with practical examples and demonstrations!
Delivered at BSides Tallinn 2023
The Power of Community and Open-Source in Tech
Tech evolves so rapidly thanks to the community-driven, open-source movement.
It's not just about the code; it's about the passionate people who build it. Through collaboration, local and online communities make it possible for ideas to flourish, connections to be made, and innovation to happen.
In this session, we'll dive into the impact of engineering communities and open-source projects, examining how they revolutionize the way we work, collaborate, and create.
We'll also uncover how innovative companies can get involved and leverage those initiatives, highlighting both the benefits and the challenges they present.
Delivered at: Digit Tartu 2024

Stefano Amorelli
Staff Software Engineer - AI - Cybersecurity
Tallinn, Estonia
Actions
Please note that Sessionize is not responsible for the accuracy or validity of the data provided by speakers. If you suspect this profile to be fake or spam, please let us know.
Jump to top