Work with me
Selected work / Portfolio

Real projects.
A closer look.

Security tools, digital products, and websites I’ve worked on. Explore the interfaces, the engineering behind them, and the evidence of delivery.

Public-site screenshots refreshed October 4, 2026. Dated release evidence, public previews, and local demos are labeled separately.

Public record

Open-source contributions

Selected contributions to independently maintained projects, linked to their pull-request records.

OWASP Agent Security Regression Harness

Merged: added scenario directory and glob validation to the CLI.

View merged PR →

OWASP cve-lite-cli

Merged: added risk scoring and next-action guidance to report output.

View merged PR →

SecOps-NG Compliance Framework

Merged: added Cyber Resilience Act Article 13(8) support-period mapping.

View merged PR →

RamenDR ramenctl

Merged: pinned GitHub Actions to immutable commit SHAs to reduce CI supply-chain risk.

View merged PR →

TruFoundation TruShell

Merged: fixed a shell-injection vulnerability in the operating-system fallback path.

View merged PR →

Contribution records · See linked pull requests for review history

Have a project in mind?

Let’s talk about what needs to work better.

Start a conversation