Security Projects
& Portfolio
Practical security tools, research projects, and open source contributions spanning threat hunting, security validation, defensive operations, and AI/LLM security
Private Repositories
Active private/in-development work — not publicly browsable on GitHub, shown here for context
Secrew
Local, authorization-first security analysis application that coordinates five specialist agents: CTI (intelligence, threat actor context, ATT&CK hypotheses), Red Team (scoped attack-surface and adversarial analysis), Bug Bounty (web/API finding shape and reproduction quality), Blue Team (mitigations, telemetry, detection engineering), and Purple Team (validation planning and unified risk correlation).
WandaPT
AI-powered autonomous penetration testing agent with enterprise security features: multi-agent parallelization (3-5x speed improvement), full MITRE ATT&CK integration (700+ techniques), CTI feed ingestion with IOC extraction, auto-generated detection rules (Sigma/YARA/KQL/Splunk), purple team operations, a distributed scan queue, remediation Kanban board, predictive vulnerability discovery, and a FastAPI + React dashboard (40+ pages).
PWD Command
AI-driven cyber operations platform: a purple-team production system for adversary emulation, breach & attack simulation, continuous validation, detection engineering, exposure management, and SOC automation. 73 SQLAlchemy models, 86 REST API routers, 67 frontend entity pages, async LLM orchestration, React 19 + Vite frontend.
Chat Shit Bob
Small Express app that sends one prompt to multiple LLMs, then asks a separate judge model to rank the responses.
ITZAMNA
AI-powered threat intelligence analysis and detection engineering platform. Ingests threat reports from URLs or local files, extracts IOCs and TTPs, maps activity to MITRE ATT&CK, and generates detection content for Sigma, YARA, Splunk, Sentinel, Elastic, QRadar, and Suricata/Snort.
Azure Repro Lab Infrastructure
Terraform-based infrastructure for a secure Azure lab environment, with multiple VMs, Azure Bastion, and comprehensive security configurations.
ELTP
Lightweight retrieval-augmented generation pipeline for ingesting documents (text and PDFs), building a vector index, and running queries against the indexed content. Implemented with Python scripts and shell helpers for setup, ingestion, indexing, and querying.
Guardian
Full-stack threat intelligence platform for collecting, correlating, and analyzing threat intelligence. React 18 + TypeScript + Tailwind CSS + Vite frontend, Supabase (PostgreSQL + Edge Functions) backend, extended by several AI-powered engines.
CyberIntelGPT
Advanced AI-powered cyber threat intelligence analysis engine. Harnesses multiple AI models and threat intelligence sources to analyze, correlate, and understand cyber threats at scale.