Projects
Open-source tools and research data, so you can run what I write about yourself.
12 open-source projects · 470 stars on GitHub
AI-powered attacks
What attackers’ AI does inside a cloud account, and environments to test it safely.
llm-trails
What LLMs reach for inside a breached AWS account, mapped to CloudTrail.
cloud-ranges
Synthetic cloud environments for testing how AI agents behave on real attack chains.
Detection and deception in AWS
Catching attackers in AWS: CloudTrail knowledge, detection as code and honeyservices.
TrailDiscover
CloudTrail events mapped to real-world incidents, research and MITRE ATT&CK.
TrailAlerts
AWS-native, serverless detection: write simple rules as code and get rich alerts.
HoneyTrail
Deploy honeyservices in AWS that alert on unauthorized access.
AI for defense
Places where AI really helps security teams, built on top of deterministic tools.
semgrep-llm-advisor
Semgrep findings plus LLM recommendations for faster remediation.
bedrock-secure-questionnaire-automation
Answer security questionnaires from your own knowledge base, serverless on Amazon Bedrock.
More tools
Smaller and older tools that are still useful.
OWASP WSTG Tracker
Track your progress through the OWASP Web Security Testing Guide checklists. Nothing to install.
AWS Incident Response Automations
Easy-to-deploy automations for incident response in AWS.
GuardDutyInsightfulAlerts
Enriches GuardDuty findings with context, so alerts are easier to act on.
TrailGuard
Checks your CloudTrail setup and where trails are sent, to spot ways attackers could tamper with logging.
AWS malware lab
Build your own malware analysis lab in AWS.