Security

Self-made hacker, curious by default. No bootcamp, no certification track, just a habit of taking things apart to see how they break.

I break things on purpose so they don't break in production. My focus is penetration testing and application security: finding the gap before someone else does, and helping teams close it without slowing them down. I love working on projects that are creative and hard to resolve!

Currently maintaining

Open source

Guardrail-MCP

A security scanner for MCP servers that catches prompt injection hidden in a tool's own description, an attack surface generic SAST tools don't know exists.

View case study→

My espresso is taking longer to brew than it should, so it might look like nothing is happening back here. Hold tight, 70+ more projects and case studies are on their way.

Not listed here

A chunk of my work is freelance and under NDA, so it won't show up on this site at all. If you're a recruiter and need to see it, reach out and I'll walk you through it directly.

Tools

BlackArch

Burp Suite

Nmap

Wireshark

Metasploit

John the Ripper

sqlmap

Custom labs

Write-ups

In review

Fully caffeinated, not idle. The holdup isn't the research, it's working out what's actually legal to publish. Responsible disclosure takes longer than finding the bug ever does. Publishing soon :)

Build the world with intent