7+ years in enterprise cybersecurity — SIEM optimization, incident response, threat intelligence — now applied to AI-era security. Request a free passive snapshot of your organization's publicly visible exposure, no strings attached.
Cybersecurity • AI Security • Automation Engineering
Grounded in enterprise defensive security and authorized security testing — not just prompt-engineering best practices.
A no-cost, no-obligation snapshot of what's publicly visible about your company's attack surface — domains, DNS, exposed certificates, email-security posture (SPF/DKIM/DMARC), and related signals. Fully passive: no scanning your live systems, no risk to your infrastructure. You get a handful of high-level findings, with an invitation to go deeper in a full assessment if it's useful.
Controlled testing of LLM-integrated applications to identify security weaknesses before they reach production.
Structured evaluation of AI system exposure — data handling, model access, and failure blast radius.
Architecture review and hardening for systems wiring LLMs into production data and business logic.
Advisory for teams shipping AI features who need a security-first second opinion before launch.
Publicly-sourced domain, DNS, certificate, and email-security signal analysis — see Africa Recon.
SOAR-style playbooks and AI-assisted triage to reduce analyst response time without losing oversight.
Design and automation of business workflows using AI, APIs, and system integrations — reducing repetitive work while maintaining monitoring, reliability, and human oversight. Examples include: intelligent alerts, executive briefings, lead qualification, customer-support workflows, and operational automation.
Selected systems and prototypes spanning production automation, internal tooling, and security research. Each one is built with explicit failure handling, not just to work in a demo.
I spent my career defending enterprise networks before I started building the systems I now automate with AI. That order matters — I design workflows with explicit failure handling, monitoring, and safe fallback behavior, not just workflows that demo well.
Senior Security Analyst experience covers SIEM optimization, incident response, and threat intelligence at enterprise scale. That background now shapes how I build AI systems: monitored, auditable, and designed to degrade gracefully instead of failing silently.
Today I split my time between hands-on security analysis and building AI systems — voice agents, workflow automation, SOAR-style playbooks, and structured pipelines that connect LLMs to real business processes.
The difference between an AI demo and an AI system that survives contact with production.
Every system is built assuming it will be attacked or misused, not just used correctly.
LLMs propose, humans (or explicit guardrails) approve anything consequential.
A workflow that works 95% of the time silently is worse than one that fails loudly 5% of the time.
Production-facing automations should include monitoring, actionable alerts, and appropriate fallback behavior.
Ship, measure, and let real usage data — not intuition — drive the next iteration.
Components that can be replaced, upgraded, or debugged in isolation, not tangled monoliths.
Tell me a bit about your company and I'll send back findings — usually within a few business days.