End-to-end adversary simulation platform with real-time telemetry streaming, MITRE ATT&CK mapping, and a live SOC triage interface. Built the SessionDriver to orchestrate the attack, log generation, detection, and scoring engines as an async pipeline over Redis pub/sub. Owned the detection engine (Sigma, anomaly, correlation), the streaming layer, scoring, and reporting. Production-hardened with Firebase auth, IDOR closures, Redis-backed rate limiting, CSP/CORS, and fail-closed security defaults.
Hosted on Render free tier — the live demo and api may take ~30s to cold-start. Open the api link first to wake the backend.
fastapi
redis
mitre att&ck
sigma
detection engineering
python
security architecture
A personal vault that runs entirely in your browser. Files are encrypted with AES-256-GCM using keys derived through 150,000 PBKDF2-SHA-256 iterations — all before anything leaves your machine. The server only ever sees ciphertext. Firebase handles identity, Supabase stores the encrypted blobs, the plaintext stays with you.
web crypto api
aes-256-gcm
pbkdf2
firebase
supabase
es modules
A minimalist QR code generator that runs entirely in your browser. Encode URLs, WiFi credentials, vCards, Google Maps locations, or any text — pick a size and color, hit generate, download the PNG. No backend, no tracking; the data never leaves your machine. Single HTML file, no build step.
vanilla js
qrcode.js
html5
css3
static