Lesith Dissanayaka

Founder and Director, Final Frontier Ventures
Chief AI Officer, ES2 Solutions

Security and AI, explained plainly.

I build AI security products. I founded Final Frontier Ventures, where I architected and created AttackSight and published the open Safer Agent Memory Standard. I'm also Chief AI Officer at ES2 Solutions, and I bring close to two decades of cybersecurity, AI, and enterprise delivery experience to both.

Colombo, Sri Lanka

Products from Final Frontier Ventures

Final Frontier Ventures is the privately held venture platform I founded in Sri Lanka. It builds and holds technology products for the long term.

Attack surface

AttackSight

Connected attack surface intelligence

I architected and created AttackSight, an FFV product. It connects what an organisation exposes, from systems and people to brand and leaked data, so teams can see where an exposure leads and what to fix first.

AI examines findings the way an experienced tester would, and the full picture resolves into one risk score from 0 to 100.

Prism
Attack surface discovery
Lens
AI host assessment
Periscope
People and brand research
Infrared
Dark web exposure
Focus
AI remediation planning
Spectrum
Reports and analytics
Beacon
Continuous monitoring
Open source

Safer Agent Memory Standard (SAMS)

Open standard and Python library

Agent memory can turn a one-off prompt injection into a standing instruction. SAMS treats memory as an attack surface, with scoped memory, taint tracking, tenant isolation, and a human review gate.

It includes the standard, a Python library, a conformance suite, a Claude Code plugin, and an MCP server. Version 0.2 adds a Postgres backend with row-level security. I co-authored it with Claude, and it's an open-source alpha release.

$ pip install safer-agent-memory

Where I focus

Information security

Penetration testing, attack surface management, cloud security, and CBSL compliance, with ISO 27001, ISO 27701, ISO 42001, PDPA, and GDPR expertise.

AI

Enterprise AI platforms and agentic systems, from MLOps and RAG to virtual agents.

AI security

Securing agents themselves, including prompt injection, agent memory, and governance for AI-assisted software development.

My work has served enterprise clients across Sri Lanka and other countries. I'm also a certified PMP and PMI-ACP, and I've led large transformation programmes using SAFe and Scrum.

Experience

Final Frontier Ventures

Jun 2026 to present
Sri Lanka

Founder and Director

  • Founded FFV to build and hold long-term technology products, starting with AI security
  • Architected and created AttackSight
  • Published the Safer Agent Memory Standard as open source

ES2 Solutions

Jan 2026 to present
Colombo

Chief AI Officer

  • Lead the convergence of AI and information security
  • Deliver security assessments, cloud security reviews, and compliance programmes for enterprise clients across Sri Lanka and other countries
  • Provide CBSL compliance, ISO 27001, ISO 27701, ISO 42001, PDPA, and GDPR expertise
  • Deliver secure development training on OWASP Top 10, SAST/DAST, threat modelling, and DevSecOps

Arimac Digital

Aug 2021 to Sep 2025
Colombo and Dubai

AI Program Lead and Cloud Strategy Lead

  • Architected the AI Factory, a multi-tenant MLOps platform on GCP Vertex AI, GKE, and Elastic Stack for Fortune 500 clients
  • Led a Gen AI virtual agent platform with multi-LLM support, RAG, and real-time WebRTC communication
  • Directed a multi-million dollar stream of a digital transformation programme for a major UAE telco, with a team of 80+, implementing SAFe for 15% efficiency gains
  • Orchestrated cloud partnerships with Microsoft Azure, Oracle, and Huawei, cutting infrastructure costs by 20%
  • Designed a talent framework that increased Data and AI team capacity by 400% in three months

Texus Solutions

Jul 2020 to Aug 2021
Colombo

Agile Delivery and Business Consultant

  • Improved operational efficiency by 35% through a new business framework
  • Established an Agile framework for lean startups, reducing go-to-market time by 10%

Tryonics

Jul 2017 to Jul 2020
Colombo

Project Manager and Business Analyst Lead

  • Led a Scrum transformation that raised efficiency by 70%
  • Launched COVID-proof insurance solutions, achieving a 90% revenue increase during the pandemic

Tech One Global and SriNetGate

Aug 2008 to Dec 2016
Dhaka and Colombo

Project Manager / Business Analyst

  • Built applications teams that drove 35% revenue growth
  • Implemented Agile delivery frameworks, improving project success rates by 25%

Education and certifications

Education

  • MBAQuantic School of Business and Technology
  • Post-Graduate Diploma, Business Analytics (GPA 4.0)Seneca Polytechnic
  • BSc (Hons), Information Systems and ManagementLondon School of Economics

Certifications held

  • Project Management Professional (PMP)PMI #2275662
  • PMI Agile Certified Practitioner (PMI-ACP)PMI #2648940

In progress

  • HTB Certified Offensive AI Expert (COAE)
  • HTB Certified Penetration Testing Specialist (CPTS)
  • Offensive Security Certified Professional (OSCP)

Toolkit

Offensive security
Nmap, Nuclei, OWASP ZAP, Burp Suite, Metasploit, Nessus, Qualys, Gobuster, ffuf, Nikto, theHarvester, Katana, Kali Linux, ParrotOS
AI and agents
Agentic AI, LLMs, RAG, MCP, Claude Code, Codex, Google ADK, MLOps, Vertex AI, vector and graph databases
Cloud and DevSecOps
AWS, Azure, GCP, Cloudflare, Docker, Kubernetes, CI/CD, SAST/DAST, SCA, Zero Trust
Development
Python, FastAPI, TypeScript, Node.js, PostgreSQL, Supabase, Neo4j, Bash, Flutter
GRC
ISO 27001:2022, ISO 27701:2025, ISO 42001, GDPR, PDPA, MITRE ATT&CK, CBSL compliance, risk assessment

Writing

  • The Agile HandbookPractical, opinionated writing on Agile: what actually works, what fails, and why
  • Safer Agent Memory: stop prompt injection from becoming permanent
  • AI Coding Agents: Beyond Predefined Functions
  • MCP (Model Context Protocol) 101: What Is It and Why Does It Matter?
  • Taking functiongemma:270m for a Spin
  • Game Theory: A Simple Framework for Practical Applications
  • Scaled Agile vs Disciplined Agile
  • Earned Value Analysis in Scrum for Dummies

Quick answers

Who is Lesith Dissanayaka?

Lesith Dissanayaka is the founder and director of Final Frontier Ventures and Chief AI Officer at ES2 Solutions. He is based in Colombo, Sri Lanka, and has close to two decades of experience across cybersecurity, AI and enterprise delivery.

What is Final Frontier Ventures?

Final Frontier Ventures (FFV) is a privately held venture platform in Sri Lanka, founded by Lesith Dissanayaka in June 2026. It builds and holds technology products for the long term.

Who created AttackSight?

Lesith Dissanayaka architected and created AttackSight, a Final Frontier Ventures product. It provides connected attack surface intelligence, showing security teams where an exposure leads and what to fix first.

What is the Safer Agent Memory Standard?

The Safer Agent Memory Standard (SAMS) is an open standard and Python library from Final Frontier Ventures, co-authored by Lesith Dissanayaka and Claude. It stops prompt injection persisting in AI agent memory, using scoped memory, taint tracking, tenant isolation and a human review gate.

How can I contact Lesith Dissanayaka?

Email lesith@ffvlk.com, or connect on LinkedIn at linkedin.com/in/lesith.

Privacy policy

Last updated: November 2026

This policy explains what lesith.com collects when you visit. The site collects as little as it can, and it does not ask you for personal details.

Contacting me

If you email me, I keep your message and address so I can reply. I do not use them for anything else.

Cloudflare

This site is hosted on Cloudflare. To deliver and protect the site, Cloudflare processes technical data such as your IP address, browser type, pages requested, timestamps and country. Cloudflare Web Analytics also measures visits without using cookies. Cloudflare handles this data under its privacy policy.

Google Analytics

If you accept analytics, this site loads Google Analytics 4 to see how it is used. It records:

Google Analytics sets cookies to tell visitors apart, and Google handles this data under its privacy policy. If you decline, Google Analytics does not load. Data is kept for 14 months.

Your choices

Use Cookie settings in the footer to change your choice at any time. Your choice is saved in your browser's local storage under cookie_consent. A light or dark theme choice is saved there too, under theme. Neither is sent anywhere.

Links to other sites

This site links to other sites and social platforms, which have their own privacy practices.

Your rights

Depending on where you live, you may be able to access, correct or delete personal data about you. Email lesith@ffvlk.com to ask. I do not sell personal data.

Changes

If this policy changes, the date at the top will change too.