A growing library of comic-style explainers that make web, cybersecurity, and AI-safety concepts understandable for kids, parents, teachers, and non-technical users. Covers web basics, online safety, AI fundamentals, responsible AI, and the OWASP Top 10 for LLMs.

The communication layer for security work: complex risk turned into clear mental models.

A benign, reproducible test suite that probes whether AI browser agents hold the line between user authorization and webpage content, six prompt-injection scenarios with inert canaries, a local evidence server, and a transcript-plus-evidence scoring rubric.

The question under test: can webpage content make an agent cross a boundary only the user should authorize?

A pipeline that turns public CISA and DFIR Report threat intel into a queryable MITRE ATT&CK trend dataset, with honest precision reporting.

Citation patterns reveal the reporting org's vantage point as much as adversary behavior.

A Burp Suite Community extension that exposes Burp's HTTP capabilities as a token-authed localhost REST API, the scripted automation the Pro license gates.

Validated across 9 PortSwigger Web Security Academy labs and 8 vulnerability classes over 266 bridge calls, with 0 defects and 0 GUI fallbacks. 8 labs solved end to end. 1 documented non-solve at Burp Community's Collaborator ceiling, attributed to the edition rather than the bridge.

A local-first home command deck on a repurposed iMac, one Grafana console spanning home network security, home health, and host vitals, with zero egress by default.

Every number is grounded in a deterministic SQL query first. The model can't fabricate traffic.

An adaptive, dependency-free cert practice engine that targets your weak areas: SSCP, CCSP, Linux Essentials, and discrete math.

Adapts to your weak areas instead of reshuffling the same question pool.