Networking & infrastructureSecurityP-01
A two-site enterprise network built entirely in VMware, with segmented zones, deny-by-default firewall rules, a site-to-site IPsec VPN, and centralized identity, all validated with test evidence.
SecurityGRCNetworking & infrastructureP-02
Moving a small regulated firm to a fully cloud-native stack, with identity as the security perimeter and compliance built in from day one.
SecurityP-06
A self-hosted Wazuh SIEM with custom detection rules, file integrity monitoring, CIS hardening, and Grafana dashboards, built to practice detection engineering.
SecurityNetworking & infrastructureP-07
How keefe.dev is built and hardened, from a static site with zero JavaScript and a strict CSP to a signed domain and authenticated email, with the scan results to prove it.