Proof of
excellence.

Problem

Security teams drown in disconnected findings. Scanners produce thousands of rows, but nothing tells you which weaknesses chain together into a realistic attack path — so remediation is prioritised by severity score instead of by actual exploitability.

Solution

I built an ingestion layer that accepts CSV security datasets and a prediction engine that processes structured JSON findings, correlating vulnerabilities, threats and security events against MITRE ATT&CK techniques, CVE records and CWE weakness classes. Automated risk-analysis workflows surface vulnerability relationships, lateral-movement risk and probable next-stage attacker activity.

Value

Defenders see correlated threats and predicted attack scenarios through interactive visualisations, with automated reporting that maps vulnerabilities to affected assets, techniques, risk levels and likely progression.

Problem

Assessment work was fragmented across separate tools with incompatible outputs, so every engagement ended in manual re-entry before any correlation or reporting could begin.

Solution

I built three dedicated modules — Network Security Testing, Web Security Testing and Endpoint Security Testing — behind one standardised JSON findings schema. The network module scans authorised environments for exposed services and weaknesses; the web module runs multiple attack scenarios against authorised applications; the endpoint module identifies misconfiguration and hardening gaps.

Value

Assessment results transfer automatically into the EDP prediction engine for ATT&CK correlation, with centralised visualisation of vulnerabilities, affected systems, techniques, risk relationships and remediation priority.

Problem

Manual requisition handling created delays, gave leadership no visibility into where a request sat, and produced inconsistent approval documentation with no audit trail.

Solution

I engineered a backend-driven workflow covering submission, review, approval and status tracking, with controlled access patterns and security-minded handling of sensitive finance data at every step.

Value

Operational efficiency and accountability improved through structured automation and traceability, while sensitive finance-related requests are handled under explicit access control.

Problem

Training operations were running on scattered tools, making cohort administration, assessment and finance tracking inconsistent and impossible to scale.

Solution

I built a complete platform with a Student Portal and Instructor Portal covering online learning delivery, assessments, live classes, course administration and financial management for real training operations.

Value

Consistent, organised learning experiences that support self-paced study, instructor visibility into learner progress, and programme administration at scale.

Problem

Learners meet embedded and connected systems as theory, and most IoT prototypes are built with security bolted on afterwards — if at all.

Solution

I run a practical build track across Arduino, ESP32 and Raspberry Pi covering embedded systems, sensor integration, automation, smart devices, industrial IoT and educational robotics, with secure-by-design architecture patterns taught from the first prototype.

Value

Prototypes that work as teaching hardware and as the seed of future community solutions, with edge computing, basic computer vision and AI integration layered in as learners advance.