Skip to content
Latest
One Stolen Identity, Several SaaS Platforms: Respond Beyond the MailboxSiemens Software Center ClickFix Attacks: Hunt Beyond the Trusted SignatureBeyondTrust Authentication Bypass: Patch the Appliance, Review the AccessPEERSTITCH: Recover the Management Trust, Not Just the FirewallCikaBika Bot: Detect the Document-to-Discord Attack ChainConnectWise Cloud Backup Incident: Revocation Is Not Tenant RecoveryAOMEI Update Tampering Shows Why Clean URLs Cannot Close Endpoint AlertsThird-Party VPN Access Shows Basic Controls Still Stop Bank IntrusionsMicrosoft Patch Tuesday Record Shows Patch Triage Must Be Risk-BasedIvanti Connect Secure Zero-Day Shows Edge Gateways Need Patch-and-Hunt DisciplineLiteLLM Gateway Flaws Show AI Infrastructure Needs Real Access ControlLiteLLM Gateway Flaws Show AI Proxies Need Control-Plane SecurityAhsayCBS Webshell Attacks Show Backup Servers Are High-Value Entry PointsDutch Warning on Chinese Edge-Device Attacks Shows Why Firewall Logs Must Leave the Firewall

Projects

The receipts. Not the brochure.

I'm a one-person shop with deep practitioner experience, not a consultancy with a polished case-study deck. The way I prove I can do something is by showing you the version I've already done, on my own property, on my own servers, or in my own apps.

These are the projects I'd ship publicly. Some are infrastructure for me and my family; some are products with paying users; some are open source. All of them are real, and I'll happily walk you through any of them in detail.

What I've actually built

Personal infrastructure, products, and open source.

  • Property infrastructure

    Shipped

    Home fiber, run by hand under my own property

    Trenched conduit, pulled fiber, terminated ends, and connected the outbuildings to the house network. Did it myself because the local contractor quote was four-figures of mostly labor.

    What conduit depth, bend radius, and termination tolerances actually look like, versus what the spec sheets say.

  • Physical security

    Live

    Property security camera system

    Installed and wired a full camera system across the property. Cabled, mounted, configured retention, set up local recording, and dialed in alert zones that don't trigger on every passing deer.

  • Infrastructure

    Ongoing

    Self-hosted cloud stack

    Built and operate my own staging environment, production environment, database servers, scheduled backups, and a tested disaster recovery plan. Not a third-party PaaS, actual servers I administer.

    If you've never failed over to a backup under time pressure, you don't have a backup. You have a hope.

  • Infrastructure

    Ongoing

    Self-hosted email server

    Run my own email server end-to-end, MX, DKIM/SPF/DMARC, queue, spam filtering, and deliverability against the big providers. Every piece of mail I send is auditable from my own box.

    Deliverability isn't a config problem; it's an ongoing reputation problem. Documenting what I do is half the work.

  • Networking · Privacy

    Shipped

    Home VPN, your traffic exits from your couch

    A router-level VPN setup that tunnels all your travel traffic back to your home network, so every site you visit sees your residential IP. Banking, geofenced services, and home-only services all 'just work' from a coffee shop or hotel.

  • Threat intelligence · Automation

    Ongoing

    CTI pipeline + curated daily newsletter

    A multi-agent pipeline I built and run myself, pulls open-source threat intel, market signals, AI news, geopolitics, and OT/SCADA events; deduplicates, tags, summarizes, and ships a daily brief. Linked to topics you care about, not a firehose.

  • Open source

    Open Source

    Collab-Mentions, Obsidian plugin (open source)

    A plugin I built for shared Obsidian vaults that notifies collaborators which file was just worked on. Works over Google Drive, iCloud, Dropbox, any sync layer where the vault lives on a shared drive.

  • Personal IT

    Ongoing

    Family IT, the ongoing engagement

    Help my in-laws and family with router issues, Starlink quirks, social-media account recovery, email problems, and general computer management. The work that taught me how to explain technology to people who didn't grow up with it.

    If your grandma can use it, your business can deploy it. If she can't, it doesn't matter how good the docs are.

  • AI integration

    Ongoing

    Business AI workflows

    Designed and deployed real AI agent workflows that replace manual work, not chatbot demos. Built for specific tasks, measured by outcome, retired when they stop being worth the spend.

  • Product · SDVOSB tooling

    Live

    SAMscout.ai

    Multi-agent AI platform that writes federal contracting proposals. Built it because SDVOSBs lose contracts to bigger BD teams, not on capability. Most active product I run.

  • Product · Service businesses

    Live

    Contractor Codex

    Branded client portal for service businesses, time tracking, invoicing, Stripe, client approval workflows, all white-labeled, $10/mo. Built it because the existing tools are overpriced for what they do.

  • Product · Veterans

    Live

    VA Disability Calc & Track

    iOS app for vets working through VA claims. BVA-accurate math, 900+ diagnostic codes, encrypted document vault, fully offline. Built because the VA claims process is brutal and the existing tools are terrible.

Want To See One In Detail?

Ask me about any of these.

Real walkthroughs, real screenshots, real config, not sanitized case studies. If it's something you want to build, I can probably help you build it.

Newsletter

The House-Of-L Brief.

Two short reads a day on markets, cyber threats, AI, and geopolitics. A "why it matters" line on every story.

Double opt-in. One-click unsubscribe on every issue. We never share your address.