Transforms IAM exports into a human-readable identity risk narrative with executive summaries and engineer-focused findings.

Lightweight, self-hosted Entra ID governance portal: track app/identity ownership, surface credential and access risk, and score tenant health — running in your own Azure subscription.

CyberArk session-risk console for privilege drift, checkout posture, high-risk access paths, and evidence-ready remediation routing.

Dedicated Kinetic Gain proof repo for CyberArk platform and company signal coverage. Synthetic board-ready evidence, CLI summary, static report, and CI gate.

Synthetic database activity monitoring and SQL threat detection portfolio covering privileged DBA activity, sensitive table access, suspicious query patterns, alert triage, dashboards, and control mapping.

local proof-of-concept implementing the Sovereign Intent Framework - a runtime governance architecture for agentic AI. Tests deterministic policy enforcement, intent manifest hashing, and audit trail generation against seeded adversarial scenarios.

Enterprise PAM demonstration - HashiCorp Vault + Delinea Secret Server with cross-platform automation, migration tooling, and architecture comparison

Unofficial Docker images for Okta Privileged Access (OPA) ScaleFT client and gateway packages, built from Debian slim and published to GHCR for labs and automation.

Network dependent Sudo session logger and logplayback GUI

Operator control plane for Microsoft Entra access reviews, privileged-role decisions, stale approvals, and identity-governance remediation posture.

Free CyberArk practice questions 2026 — 861 questions across 10 exams | certbase.pro

Privileged change briefing for CyberArk access risk and FirstUp workforce communication evidence.

BeyondTrust is a cybersecurity company specializing in privileged access management (PAM) and vulnerability management solutions. Their products help organizations prevent data breaches, malware attacks, and insider threats by identifying and controlling the access of privileged users, accounts, and credentials across the enterprise.

CyberArk is the global leader in identity security, providing a unified Identity Security Platform that protects human, machine, and application identities across hybrid and multi-cloud environments.

A pattern for implementing "insider" encapsulation (trusted/"friend"-only access) of properties and methods in native JavaScript using ES2022 private fields and explicit trust declarations.

Self-hosted open-source credential manager for teams. Share company accounts without exposing passwords. Chrome extension auto-login. One-click offboarding.

Secure Keyboard Solution for managing cloud assets using Intune and Entra ID

Zero-standing-access AWS break glass system using Entra PIM, Azure Automation, Power Automate and Microsoft Graph API