Selected projects and systems
A few projects that reflect my interests in secure architecture, full-stack development, AI-powered experiences, and practical infrastructure.
RAG Portfolio Assistant
FeaturedAn AI-powered assistant built into my portfolio that answers questions about my work, projects, background, and articles using a retrieval-based knowledge flow.
Reusable Secure Auth System
FeaturedA production-deployed authentication and authorization backend built under Secure SDLC principles. Supports hybrid authentication for browser and API clients, role-based access control, and a full security documentation suite.
Security Monitoring with Wazuh SIEM
Open-source SIEM deployed on a production VPS with custom decoders, application-level detection rules, and MITRE ATT&CK threat classification. Real attack data from day one.
Web Security Scanner
FeaturedAn automated web security scanner that checks HTTP security headers, SSL certificates, DMARC records, and exposed sensitive files. Returns a weighted score and grade from A to F with plain-language findings.
Zero Trust Infrastructure
Production server hardened with Zero Trust Network Access using Netbird and WireGuard. Port 22 closed on the public internet. SSH and internal services accessible only through an encrypted private overlay network.