Projects

Static API serving NIST CMVP validated modules data, auto-updated via GitHub Actions.

Reference implementation for converting legacy compliance documents to machine-readable formats.

GitOps for FedRAMP 20x - Flux, Kyverno, GKE, Terraform.

Replace static Word docs with YAML-based crypto module tracking and automated CMVP validation.

Specialized cybersecurity AI trained on 596 NIST publications. Provides expert guidance on security frameworks (SP 800-53, CSF 2.0), Zero Trust, FIPS cryptography, cloud security, and supply chain risk management. 4.7GB model with 32K context.

A collection of my open source security compliance datasets, models (fine-tuned LLMs), etc.

Model Context Protocol (MCP) server for querying FedRAMP documentation - enables AI-powered analysis of security controls, compliance requirements, and FRMR datasets

Archived proof-of-concept web app for viewing Vanta audit evidence locally. Features multiple Catppuccin themes, in-app PDF/JSON viewer, bulk operations, and progress tracking.

Built the assessment app used by Fortreum to conduct FedRAMP 20x pilot assessments for InfusionPoints.

GenAI security auditing tool for AWS Bedrock combining cloud security best practices with prompt injection detection, PII compliance, and model poisoning detection