Selected work
All on GitHub
Scans every commit for injection, backdoors, malicious packages and insecure Dockerfiles. Selected for miniOrange Identity Shield.

Wazuh and ELK running a live SOC, with custom correlation rules mapped to MITRE ATT&CK and PICERL incident reports.

Detects deauth attacks, ARP spoofing, evil twins and rogue APs. Logs go into an encrypted hash chain.
Ask questions of your PDFs with Gemini and semantic search, grounded in the source text to cut hallucination.