Projects

EngSecLabs

EngSecLabs was my security consulting practice, focused on helping startups and scale-ups build secure, compliant systems.

TrailTool

TrailTool is an open-source tool I built to audit AWS CloudTrail logs, correlate human and agent activity, generate least-privilege IAM policies, and detect unwanted behavior.

Pupster

Pupster is a Slack app I wrote in 2020 to create profiles for team dogs.

Clever Badges

Clever Badges is an authentication system targeted at K-2 students. I wrote a blog post about the security of Clever Badges.

Alex ❤️ Hana

I lovingly built our wedding website at alexandhana.com.

Two-Factor at Twitter

I helped build two-factor at Twitter. Mat Honan wrote an article about it for Wired called "Twitter’s Killer New Two-Factor Solution Kicks SMS to the Curb".

NoPassword

NoPassword was an open-source rails engine demonstrating passwordless logins using email as a secret delivery mechanism. It's archived on Github. See the HN discussion.

Privacy Design Analyzer

For my masters program I built a tool for analyzing privacy concerns in a system using a method analogous to threat modelling. It's archived on Github.