Security engineering research and tooling: OT/ICS threat detection, AI security, and GRC compliance.
OT/ICS & Threat Detection: network analysis, threat intelligence pipelines, and SOC tooling built for practical use. Detection engineering with adversarial test coverage and regression locks.
AI Security: detection of prompt injection, jailbreaks, and adversarial inputs against LLMs. Weighted scoring, evasion-resistant signatures, and false-positive tuning.
GRC & Compliance: NIS2 vendor risk frameworks, MFA audit tooling, and policy assessment aligned to EU and NCSC standards.
Post-Quantum Cryptography: sovereign communication protocols resistant to quantum attack.
| Repository | Description |
|---|---|
| ai-firewall | LLM prompt injection and jailbreak detection. Tiered weighted scoring, evasion-resistant signatures, adversarial test suite. 82 tests, CI green. |
| security-gate | Self-enforcing static analysis gate. 20 scanners, 201 tests, CI with real teeth. Caught and patched a live CVE (GHSA-6v7p-g79w-8964) in its own dependency graph. Scanners cover .py and .ts; SCA covers Python dependencies only. |
| security-toolkit | Modular web log analyser. SQLi detection hardened against string-boolean and comment-terminator evasion. 31-test adversarial suite with locked regression cases. |
| llm-honeypot | Fake AI assistant that silently logs and classifies attack attempts. Detects prompt injection, jailbreaks, data extraction, and reconnaissance. |
| password-policy-checker | Password policy evaluator against NIST SP 800-63B and NCSC guidance, with HaveIBeenPwned k-anonymity breach checking. |
| port-scanner | TCP connect port scanner with banner grabbing, CIDR support, and JSON/Markdown output. |
| nis2-vendor-risk-framework | NIS2-aligned third-party risk assessment framework with scoring rubric and worked example. |
| mfa-coverage-tracker | M365 MFA audit tool that identifies weak or missing MFA, generates HTML risk reports. |
| intel-pipeline | Automated threat intelligence collection and processing pipeline. |
| pcap-analyser | Network packet capture analysis and anomaly detection. |
| incident-tracker | SOC incident ticketing and case management system. |
| unified-dashboard | Single pane of glass across the security toolkit. |
Security engineer with a background in IT infrastructure and NHS deployment. CompTIA Security+ and Network+ certified, eAIS in progress.
Every project ships with a quality gate, adversarial test coverage, and documented design decisions. The gate enforces itself. Automated gate coverage is Python and TypeScript.
Targeting OT/ICS threat detection and AI security engineering roles.