AI/ML Tools

The same infrastructure that powers Claude Code is now available as a library. Here’s how to use it for GRC evidence review workflows.

Turn compliance research from tedious PDF searching into natural conversation. A practical tutorial on building MCP servers for PCI-DSS requirements.

A collection of my open source security compliance datasets, models (fine-tuned LLMs), etc.

Model Context Protocol (MCP) server for querying FedRAMP documentation - enables AI-powered analysis of security controls, compliance requirements, and FRMR datasets

MCP sounds great in theory—give AI agents access to tools via a standard protocol. In practice, context window bloat, security risks, and operational complexity make it hard to recommend for production use cases.

GenAI security auditing tool for AWS Bedrock combining cloud security best practices with prompt injection detection, PII compliance, and model poisoning detection