Security work should be practical enough for engineers to adopt, precise enough for reviewers to trust, and clear enough for leaders to act on.
I build tools and contribute to open-source security projects where the output has to survive real scrutiny: phishing analysis, vulnerability triage, CI/CD hardening, SARIF reporting, policy mapping, and evidence trails that show how a finding was produced.
| Signal | What It Shows |
|---|---|
| PhishGuard AI on GitHub Marketplace | I can take a security idea from implementation to packaged, reusable developer workflow |
| OWASP, Prowler, SecOps-NG, RamenDR work | I contribute inside established security communities and respond to maintainer standards |
| Security+, AWS Academy Cloud Foundations, BS Information Technology | I connect hands-on engineering with governance, auditability, and risk language |
PhishGuard AI is an explainable offline phishing detection engine for URLs and email. It is designed for local analysis, CI workflows, GitHub Code Scanning, and security education where black-box scoring is not enough.
- uses: omobolajiadeyan/phishguard-ai@v0.5.1|
Explainable Detection URL, email, redirect, typosquatting, and authentication-signal analysis with readable reasoning. |
Automation Ready JSON and SARIF 2.1.0 output for GitHub Code Scanning, CI workflows, and downstream tooling. |
Trust Boundaries SPF, DKIM, and DMARC are treated as supporting evidence, not magic proof of safety. |
Recent work includes benchmark recall improvements, a stable Python API guide, SARIF validation, REST API server mode, third-party adoption templates, expanded parser trust-boundary tests, and an unpacked Chrome/Edge extension prototype for current-page URL checks.
Real CLI output on two public-safe inputs (example.com and the TEST-NET-1 documentation range), refreshed July 28, 2026 — see PROJECT_EVIDENCE.md for the exact commands and reproducible benchmark evidence.
|
Offline phishing analysis with explainable scoring, SARIF output, Code Scanning support, and Marketplace packaging.
|
CI-friendly credential scanner with redacted JSON/SARIF output, reusable GitHub Action support, and a browser report viewer for safe evidence review.
|
|
Threat detection with MITRE ATT&CK mappings, structured JSON/SARIF output, and a browser report viewer for exported evidence.
|
Behavioral anomaly detection for user and IP risk scoring, including UEBA-style insider-threat patterns and a TypeScript report viewer for exported JSON.
|
|
CVE analysis with NVD data, deterministic triage, optional AI-assisted narrative, and a TypeScript report viewer for reviewer-friendly output.
|
Real-time and offline CVE intelligence using NVD data, severity aggregation, JSON evidence export, and a browser report viewer for reviewer-friendly triage.
|
Private pre-launch: AppSec Compliance Bridge converts application-security scan findings into traceable NIST SP 800-53 control mappings and POA&M evidence, with a React/TypeScript demo shell now in progress.
| Product | Recent Upgrade | Evidence |
|---|---|---|
| PhishGuard AI | Added an unpacked Chrome/Edge browser extension prototype so users can check the current tab or paste a URL without using the CLI | Extension commit, Extension guide |
| Log Analyzer | Added JSON summary evidence, evaluator docs, an evidence graphic, and a JavaScript browser report viewer for exported log findings | Upgrade commit, Evidence guide |
| Secrets Scanner | Added redacted summary evidence, evaluator docs, an evidence graphic, a clearer README evidence path, and a JavaScript browser report viewer for exported secret findings | Upgrade commit, Evidence guide |
| CVE Dashboard | Added offline JSON input, summary exports, evaluator docs, an evidence graphic, a saved viewer screenshot, and a JavaScript report viewer for CVE triage evidence | Upgrade commit, Evidence guide |
| BehaviorSense | Added evaluator docs, a TypeScript browser report viewer, project evidence, and a richer sample report for exported anomaly JSON | Evidence commit, Evidence guide |
| VulnGPT | Added evaluator docs, a TypeScript browser report viewer, project evidence, and a richer sample report for CVE triage JSON | Evidence commit, Evidence guide |
| AppSec Compliance Bridge | Added public-safe demo docs and a React/TypeScript frontend shell for the upload-to-POA&M workflow | Demo docs, React shell |
| GitHub profile | Replaced raw language-percentage badges with product stack badges that show Python, TypeScript, JavaScript, SARIF, and GitHub Actions roles | Profile commit |
| Area | Selected Evidence |
|---|---|
| Application security automation | OWASP Agent Security Regression Harness PR #150, OWASP cve-lite-cli PR #602 |
| Cloud and compliance security | Prowler PR #11098, SecOps-NG PR #281 |
| Supply-chain hardening | RamenDR ramenctl PR #466 |
| API and vulnerability tooling | PhishGuard API/server work, SARIF validation, Code Scanning hygiene |
Full dated record: OPEN_SOURCE_LOG.md
- SPF, DKIM, and DMARC in Phishing Detection: Useful Signals, Not Magic Answers
- From Single Files to Scenario Suites: Batch Validation in the OWASP Agent Security Regression Harness
- PhishGuard benchmark recall note
I am open to senior security engineering roles, application-security tooling collaboration, technical advisory work, and community projects around practical security automation.