Alessandro Versari developed security testing infrastructure and detection tooling for Grafana’s Zabbix integration, focusing on CVE-2022-26148 across the google/security-testbeds and google/tsunami-security-scanner-plugins repositories. He built a Docker-based testbed to reproduce the vulnerability, enabling side-by-side validation of vulnerable and non-vulnerable Grafana instances. Using Java and Gradle, Alessandro implemented a Tsunami plugin that scans for exposed credentials by analyzing HTML patterns, supporting proactive vulnerability detection. He also enhanced documentation and test coverage, clarifying advisory guidance and streamlining mock server responses. The work demonstrated depth in security research, code quality, and test infrastructure, addressing real-world credential disclosure risks.