{{ typedName }}{{ cursor }}

Secure medical platform built by a team of 5 — dual pfSense firewalls across 7 segmented VLANs, BIND9, Samba AD, Grafana + Loki SIEM in GNS3, plus a FastAPI + React 18 app with JWT + 2FA, AES-256, ClamAV scanning, OCR anonymization and a reference-range analysis engine.

Open-source web-app security scanner in three working parts: a passive + active scanner (TLS, headers, sensitive paths, plus opt-in SQLi / XSS / path-traversal), a grounded AI analyzer that runs on a local LLM by default so scan data never leaves your machine, and a React + Tailwind operator console. FastAPI + SQLite backend; at v1.2.0 "The Keep" with a one-command Docker run.

SOC analyst platform that unifies two triage tasks in one dashboard — automated phishing-email analysis (headers, SPF/DKIM/DMARC, URLs, attachments, content in FR & EN) and multi-source IOC lookup (VirusTotal, AbuseIPDB, URLhaus, MalwareBazaar, WHOIS) — each returning an explainable 0–100 risk score and verdict, with any extracted indicator jumping straight to a lookup. Shipped (v1.0.1) with 55 tests in CI. Built with a teammate during a VadaSoft internship; I own the phishing module.

A private, local, agentic voice assistant — say her name and she listens, thinks and acts. Speech-to-text, a local LLM (Ollama) and TTS run across your own devices, with a CPU fallback when the GPU laptop is away; no audio ever leaves your machines. Security-first: tools are allowlisted and every action needs your confirmation. Early build (Phase 0), named after Ada Lovelace.

A secure health portal for patients, practitioners and administrative staff across three clinics — a Spring Boot + Keycloak API with a React dashboard. On a team of 6, I designed and built the authentication & authorization layer: a backend-for-frontend session model (no tokens ever reach the browser), an ownership guard, an append-only audit trail, an access-matrix test that fails the build on any unguarded route, and a privilege-escalation fix found via the threat model (staff held Keycloak admin rights) — all behind a DevSecOps CI/CD pipeline (CodeQL, OWASP dependency-check, gitleaks, Trivy, ZAP).