Curating the best DevSecOps resources and tooling.

A multi-vault secret injection tool for safely injecting secrets into app environment

A controlled environment for demonstrating and understanding buffer overflow vulnerabilities in web applications. This project is designed for educational purposes as part of secure software development training.

Excalidraw library for threat modeling diagrams

DocF-Sec-Check helps to make your Dockerfile commands more secure.

🛡 Scan GitHub repositories for dependency vulnerabilities using OSV database. Supports npm, PyPI, RubyGems, Go, and PHP.

Vulnerable React/Next application

DSL Core - Specification for Audit-by-Design - Human & machine-readable domain-specific language (DSL) for defining, validating, and auditing software requirements. Open specification, free to use and extend.

Fixing an Insecure Blog Application.

The place where you will find all security related topics/tools/techniques made by developers for developers concerned about security.

A program that checks and removes unwanted input ensuring that data conforms to security-related requirements.

This project includes a Node.js backend service that provides APIs related to file storage, note storage, and authentication features. The main target of this application is to securely store data in storage. The project utilizes some secure software development methodologies.

A Web Application to demonstrate Face recognition as the 2 factor authentication.

Python-based secure coding review project demonstrating vulnerability identification and remediation techniques.

Secure Software Development, Software Architecture, OOP, Software Product Line, UML Modeling

Web Apps book store for the course of secure software dev

Building strong foundations in secure software development.

Pseudocode for securing an online payment system against SQL injection and XSS attacks. MSCS-535 Secure Software Development.

A technical portfolio documenting applied experience and continuous growth across several disciplines. It emphasizes practical work, thoughtful documentation, and a steady commitment to excellence in cloud, systems, cybersecurity, software, and infrastructure.

Security hardening of a Hospital Management System, 8 vulnerabilities fixed (NoSQL injection, SSRF, XSS, CORS, secrets exposure, outdated components, Vite CVE-2025-30208) + Google OAuth 2.0 with PKCE.