The proof behind the brand. Real pipelines, honest methodology, documented findings, not marketing language.
A formal reference model for machine-initiated consequence attribution that keeps material consequence structure, authority and accountability closure, and evidentiary warrant as separate objects, so an asserted relation never silently becomes an established finding.
An independently authored challenge found twelve rule defects against frozen specification bytes — none of which the project's own self-check had caught.
A growing library of comic-style explainers that make web, cybersecurity, and AI-safety concepts understandable for kids, parents, teachers, and non-technical users. Covers web basics, online safety, AI fundamentals, responsible AI, and the OWASP Top 10 for LLMs.
The communication layer for security work: complex risk turned into clear mental models.
A benign, reproducible test suite that probes whether AI browser agents hold the line between user authorization and webpage content, six prompt-injection scenarios with inert canaries, a local evidence server, and a transcript-plus-evidence scoring rubric.
The question under test: can webpage content make an agent cross a boundary only the user should authorize?
A pipeline that turns public CISA and DFIR Report threat intel into a queryable MITRE ATT&CK trend dataset, with honest precision reporting.
Citation patterns reveal the reporting org's vantage point as much as adversary behavior.
A Burp Suite Community extension that exposes Burp's HTTP capabilities as a token-authed localhost REST API, the scripted automation the Pro license gates.
Validated across 9 PortSwigger Web Security Academy labs and 8 vulnerability classes over 266 bridge calls, with 0 defects and 0 GUI fallbacks. 8 labs solved end to end. 1 documented non-solve at Burp Community's Collaborator ceiling, attributed to the edition rather than the bridge.
A local-first home command deck on a repurposed iMac, one Grafana console spanning home network security, home health, and host vitals, with zero egress by default.
Every number is grounded in a deterministic SQL query first. The model can't fabricate traffic.
An adaptive, dependency-free cert practice engine that targets your weak areas: SSCP, CCSP, Linux Essentials, and discrete math.
Adapts to your weak areas instead of reshuffling the same question pool.