SELECTED WORK
These projects are where I’ve been putting my time: writing code, adding tests, and working through the security trade-offs instead of just describing them.
A FastAPI gateway prototype with heuristic prompt-injection, PII and secret checks, validated YAML policy rules, metadata-only auditing, and a React dashboard with authenticated summaries of recent decisions and findings. Synthetic detector evaluation is included; real provider forwarding remains disabled by default.
Read the project breakdownA local static scanner for Terraform, Dockerfiles, and Compose with text, JSON, and SARIF reports. Its dashboard distinguishes complete, partial, and failed scans, and preserves suppression reasons and scan diagnostics instead of presenting incomplete input as clean.
Read the updated case studyAn early-stage platform for individual security workspaces and organization-scale exposure management. Current foundations include authorized local assessments, finding lifecycle tracking, PostgreSQL tenant schema, row-level security and real database isolation tests.
Read the project case study