Actual app · scan setupnetstig
Network STIG evidence, automated
Pulls running configs from batches of devices, diffs them against baselines and emits STIG Viewer .ckl checklists in four commands.
Python · Netmiko · NAPALM · Nornir · Typer CLI · v1.3.0
Decisions, made tangible.
Tools built around problems I met running secure infrastructure, plus the platform they run on. Each page explains the workflow, the implementation, and the security choices behind it.
Actual app · new sessionSpotter
A macOS terminal with an AI you set the level on
Four assistance levels from Off to Tandem; secrets stay in the Keychain by reference and every risky command stops at an approval sheet. 1,700+ tests.
Swift 6 · SwiftUI · AppKit · SwiftTerm · iOS companion
Self-hosted platform
The VPS that runs this site, operated like production
GitLab CE with CI, OpenBao secrets delivered by AppRole, an nginx edge proxy with automated TLS, and containers that run read-only, non-root, with every capability dropped.
Rocky Linux 10 · Docker Compose · OpenBao · GitLab CE · nginx · Tailscale
Actual app · sample checklistSTIG Checklist Editor
Desktop checklist review and export
Imports Cyber Exchange packages, tracks review state and evidence per rule, and exports CKL and STIG Viewer 3 CKLB files offline.
Go + Wails · React/TypeScript UI · Windows · macOS · Linux
Bao GUI
A desktop client for OpenBao secrets
Browses and edits KV v2 secrets with version history, manages tokens and transit keys, and unlocks saved profiles with Touch ID through the macOS Keychain.
Go 1.26 · Fyne · OpenBao SDK v2 · macOS · Linux
These are independent, AI-assisted projects. Screenshots show actual applications with startup screens or sample data; they do not show employer systems or establish production readiness. Source repositories are private on a self-hosted GitLab; ask for a walkthrough.