Vulnerability analyst. Security practitioner. Technical builder.
By day, I work in cybersecurity. Outside of work, this site is my own space for practical builds, technical experiments, writing, and lessons from making ideas work properly.
Essays and notes on cybersecurity, technology, and the thinking behind practical technical work.
The security industry has spent three years worrying about AI phishing emails. Meanwhile, AI has been quietly automating the entire attack chain.
A compact archive of practical builds, technical experiments, and project write-ups from things I've built, fixed, or learned the hard way.
Self-hosted vulnerability management with prioritised upgrades, rollback and evidence that a fix worked.
A daily vulnerability report using NVD, CISA KEV and EPSS, with private CVE-list analysis in your browser.
The full set of builds, experiments, and write-ups in one place.