Valentina Palmiotti

Valentina Palmiotti, known professionally as Chompie, is an American cybersecurity researcher and ethical hacker. She is the Head of X-Force Offensive Research at IBM, where she leads a team focused on offensive security and exploit development. Her work involves discovering vulnerabilities in software and hardware, developing proof-of-concept exploits, and helping to secure critical systems.

Palmiotti is widely recognized in the security community for her expertise in low-level vulnerabilities and her success at Pwn2Own, the world's most prestigious hacking competition. At Pwn2Own Berlin 2026, she was the most successful individual competitor, earning a share of the $1.3 million prize pool. Her research has been featured by the BBC, Ars Technica, and other major outlets, and she is a sought-after speaker at conferences like Black Hat and BSides. [edit]

Palmiotti's entry into cybersecurity came through a notable path. In 2017, she was awarded a full scholarship to the inaugural cybersecurity boot camp organized by the United States Department of Defense. This program gave her formal training in offensive security and set her on a career track.

She adopted the alias Chompie early on, a name that has since become well known. Her early interests centered on low-level system internals, exploit development, and post-exploitation techniques. Before joining IBM, she honed these skills through independent research and participation in security communities. [edit]

After her 2017 boot camp, Palmiotti joined IBM's X-Force Red team as an exploit researcher. She quickly made a name for herself. In December 2022, she co-discovered a critical Windows code-execution vulnerability that experts said could rival EternalBlue, the NSA exploit behind the WannaCry ransomware attacks. The discovery was widely covered by Ars Technica and underscored her skill.

She later rose to lead X-Force Offensive Research, where she oversees vulnerability research and exploit development. In 2026, she won Pwn2Own Berlin, the top hacking contest, as the most successful individual competitor. Her keynote at BSides Canberra, 'The Exploit Development Life Cycle,' has been viewed over 4.4 million times on YouTube. [edit]

Palmiotti's public persona is built on her technical credibility and no-nonsense approach. She is known for deep dives into exploit development and for her candid discussions about the industry's flaws, including sexism and imposter syndrome. At Black Hat 2025, she participated in a panel on these issues, earning respect for her honesty.

Her talks are dense with technical detail, aimed at fellow researchers, and she has a reputation for being approachable despite her senior role. She uses her platform to advocate for better vulnerability disclosure practices and to mentor newcomers. [edit]

Valentina Palmiotti does not currently hold a global ranking within the iFANN fame database, as no evaluation data has been gathered for her at this time. While she commands immense respect and influence within the specialized circles of cybersecurity, exploit development, and ethical hacking, she has not yet crossed into the metrics required to generate a ranked position on the world stage. Her reputation is built entirely on technical mastery rather than mass-market consumption or viral celebrity signals.

The concept of a traditional fandom does not apply to Palmiotti, known professionally as Chompie. There is no organized fanbase with a formal name, no dedicated subreddit acting as a central hub for enthusiasts, and no community engaging in chart pushes or birthday campaigns. Her following consists exclusively of peers, fellow researchers, and students who follow her work out of professional necessity and admiration for her skill. Unlike pop stars or athletes whose fans might organize charity drives or crowd disruptions, Palmiotti's audience interacts with her through academic channels, Q&A sessions, and discussions about the future of AI in security. The "fame" she possesses is strictly professional; it is measured by the severity of vulnerabilities she uncovers and the authority of her warnings regarding advanced AI models like Claude Mythos. She operates in a realm where influence is defined by code and zero-day exploits rather than public adoration or cultural mythology.[edit]

The alias Chompie stems from a creature in the game Runescape, a nod to her early gaming roots before she became a legendary figure in hacking circles. She often describes herself with a mix of precision and whimsy as a 'hacker, exploit developer/weird machine mechanic,' a title that perfectly captures her hands-on approach to low-level vulnerabilities. Her personal digital hub is chomp.ie, and she maintains an active presence on X as @chompie1337, where she shares deep-dive research and candid industry commentary. One of her most notable achievements occurred in 2022 when a Windows vulnerability discovery she made was compared directly to EternalBlue, a rare distinction that highlighted the severity of her findings. Beyond her technical prowess, she has been open about the psychological toll of the industry, frequently discussing the challenges of imposter syndrome in cybersecurity.

A widely retold story in the community involves her stark warnings regarding the threat advanced AI models like Claude Mythos pose to ethical hackers, suggesting these tools could soon find flaws faster than humans. This narrative gained significant traction in recent news cycles when she argued that such technology might render human expertise obsolete. Another legend centers on her Pwn2Own Berlin victory, where she secured the top spot in a competition known for its grueling difficulty, earning a share of the massive prize pool while maintaining her reputation as the most successful individual competitor of the event. These stories define her legacy more than any public persona ever could.[edit]

Details about Palmiotti's family are not public. She has not shared information about her parents, siblings, or extended family. Her public focus is entirely on her professional work, and she maintains a clear boundary between her personal and professional life. [edit]

IBM X-Force Red and X-Force Offensive Research, Pwn2Own, Black Hat, BSides. [edit]

Palmiotti has kept her personal life private, and no public information exists about her dating history or current relationship status. She has not shared details about any partners, and media coverage focuses exclusively on her professional achievements. As of 2026, she appears to be single, but this is not confirmed. [edit]

Palmiotti's net worth is not publicly documented in official filings, but her income streams are robust and varied. Her primary earnings come from her leadership role as Head of X-Force Offensive Research at IBM, where she guides teams in offensive security and exploit development. Additional revenue is generated through high-profile speaking engagements and substantial winnings from hacking competitions. At Pwn2Own Berlin, the total prize pool reached $1,298,250, and she emerged as the top earner, though her exact individual share remains undisclosed. Per iFANN's editorial analysis, her estimated net worth stands at $2 Million as of 2026, reflecting the typical compensation for senior security researchers combined with her competitive success.[edit]

Palmiotti's most notable award is winning Pwn2Own Berlin 2026, where she was the top individual competitor. Pwn2Own is the most prestigious hacking contest, and her victory places her among the elite ethical hackers worldwide. [edit]