Security tools and research projects I've built
Autonomous security scanner & auto-fixer using the Ralph Loop pattern - an iterative LLM loop that scans, fixes, and verifies until clean. Supports Python, Node.js, Go, Rust, and Ruby ecosystems. Found CVE-2025-68428 in Apache Superset.
A self-serve threat modeling platform that uses LLMs to analyze system designs and generate comprehensive security threat assessments using the STRIDE methodology. Import JIRA tickets, upload PRDs and architecture diagrams, and get actionable remediation steps with priority and effort estimates.
AI-powered security scanner that detects sensitive information leakage in web applications using Claude AI. Scans 50+ risky paths, checks security headers, analyzes JavaScript files, and categorizes findings by severity.
AI-powered threat modeling application that automatically generates comprehensive attack trees based on attacker objectives. Includes 6 pre-built scenarios covering credential theft, authorization bypass, financial fraud, DoS, and more.