About Charlie Su

Building a more secure future for AI

I build secure AI systems. As a former CISO, I've spent over a decade protecting organizations from evolving threats. When AI adoption started accelerating, I saw a familiar pattern: companies rushing to adopt new technology without considering the security implications.

The difference this time? AI systems can be more complex, more interconnected, and more consequential than anything we've seen before. A single vulnerability doesn't just expose data—it can compromise the integrity of autonomous decisions affecting millions of people.

That realization led me to create TopFlow and dedicate my practice to AI security. Today, I work with security teams and enterprises, helping them build AI systems that are secure by design, compliant by default, and resilient against emerging threats.

My Journey

From Security Analyst to AI Security Advocate

2010

Started in Cybersecurity

Began career as security analyst, fascinated by defensive architecture and threat modeling.

2015

Promoted to CISO

Led security strategy at Series B startup; saw firsthand risks of adopting emerging tech without security consideration.

2020

AI Security Epiphany

Watched AI adoption accelerate with minimal security planning. Realized there was no reference architecture for secure AI.

2023

Founded TopFlow

Launched open-source project to demonstrate security-first AI patterns. Became building block for broader AI security ecosystem.

2024

Expanded Consulting

Worked with 10+ enterprises on AI security architecture, compliance automation, and threat modeling.

2025

Building the AI Security Movement

Creating resources, tools, and frameworks to make secure AI the default, not the exception.

Credentials

Expertise & Recognition

AI Security Architecture
Compliance Automation (GDPR, SOC 2, HIPAA, ISO 21434)
Threat Modeling & Risk Assessment
Secure Code Review
Open Source Community Building
Product Security Advising
Team Workshops & Training
Enterprise Architecture

Ready to explore TopFlow or discuss AI security for your team?