OWASP Foundation Web Repository

secrets.wtf: defensive AI infrastructure exposure index for Ollama and LM Studio hosts, local LLM APIs, model observations, remediation, and takedown requests.

OAuth2 Playground for testing the different grant types flows out of the box

"A secure Policy-as-Code platform leveraging Flask and Open Policy Agent (OPA) to enforce scalable, real-time authorization decisions using externalized policies."

SecuriLayer Community Edition — multi-platform anti-scam security stack for Telegram, Discord, Slack, X and browser extension with explainable detections and API-first integration.

A personal static website built hosted on GitHub Pages

JWT Security Analyzer is a security-focused web application built with FastAPI that inspects JSON Web Tokens, detects common misconfigurations and vulnerabilities, and provides a structured security report with a calculated risk score.

Complete 6-week cybersecurity internship assessment covering OWASP Top 10, penetration testing, API security, and ethical hacking

Secure systems engineering portfolio focused on backend architecture, API security, DevSecOps and cloud security.

Full-stack AI real estate concierge for Panama luxury property: live listings plus a Claude-powered agent grounded in Panama property, foreign-buyer law, and visa programs. The Anthropic API key is secured server-side via a Netlify serverless function.

Auth-Master is a lightweight, scalable API authentication middleware designed to manage multi-token systems with granular permission scopes. It centralizes token validation and access control, allowing you to secure your backend services with a flexible, database-backed authentication layer.

API platform info for security

Curated list of Unix binaries that can be exploited to bypass system security restrictions

A curated index of services, tooling, and open source solutions for API analysis, analytics, linting, traffic inspection, and intelligence.

Security research on Phia's API — found 5 unauthenticated endpoints on production including affiliate fraud via CreateMerchantUrl. Includes HAR analysis, live curl proof, Locust load test (65 requests, 0 failures), and patch recommendations.

A personal blog on cybersecurity, AI experiments, and real-world technical insights.