Security engineer. Rust builder. Zero‑trust practitioner.
I build tools that make security measurable, actionable, and free.
No SaaS. No exfiltration. No licensing traps — just a binary, your terminal, and your code.
| Project | Description | Stack |
|---|---|---|
| ApeGuard | One-command local security audit — 5 scanner layers, ZT mapping, multi-format reports | Rust · CLI · MCP |
| Azure Security | 100+ KQL queries, PowerShell audits, Azure Policies, Bicep baselines, Sentinel workbooks & playbooks | KQL · PowerShell · ARM |
| UZTF | The Unified Zero Trust Framework — 8-pillar maturity model that extends CISA ZTMM with quantitative scoring | Spec · YAML · Kyōto |
brew install apeguard→ finds secrets, vulns, misconfigs, and attack chains in your codebase.
Outputs Markdown, JSON, SARIF, or HTML — for engineers, leadership, and auditors.
# Install ApeGuard (macOS / Linux)
brew tap pirateape/tap && brew install apeguard
# Full audit — your source code right now
apeguard run --dir . --report md- Making security posture zero‑cost — every team deserves enterprise‑grade tooling
- Closing the CISA-to-execution gap — frameworks are useless without CLI tools that implement them
- Rust-native security tooling — memory‑safe, single binary, no runtime deps
- AI‑augmented remediation — using LLMs to close findings, not just find them
📈 Activity & Stats
▲ ApeGuard — Rust security scanner ▲ 131 tests · 0 warnings · v0.1.0
▲ Azure Security — Azure defense-in-depth ▲ 45 KQL · 35 PS1 · 14 policies · 7 alert rules
▲ UZTF — Zero Trust Framework ▲ Released v1.0 · CISA-aligned