Projects

Active Projects

HIPAA Security Rule × Agentic AI: Control Gap Mapping

Inspired by a scene in HBO’s The Pitt where an AI scribe fabricates a patient’s history, this practitioner reference asks a harder question: what happens when an agent doesn’t hallucinate, but instead uses a clinician’s legitimate access more broadly than the encounter justifies. It maps every HIPAA Security Rule safeguard to the OWASP Top 10 for Agentic Applications (2026), showing where autonomous, tool using AI agents in PHI environments fall outside existing control guidance, and tracks where the 2024 NPRM closes that gap and where it doesn’t. Available on GitHub.

Cyclyst

A self-hosted CE/CPE credential renewal tracker for CISSP, CISA, CRISC, PMP, and other certifications. It’s a Flask/SQLite dashboard that tracks cycle deadlines, category rules, and hour totals entirely on your machine, with optional calendar and transcript-PDF import to stage activity for review. Available on GitHub.

Security Market Trends

An interactive, decade-by-decade history of how cybersecurity hiring has evolved — from the lone operators of the 1980s to today’s AI red teamers. It traces the workforce shifts, defining breaches, salary curves, and emerging roles across five decades, and frames the question now facing every security leader: which skills break, which survive, and which win in the AI era.

secleader-eval

A Claude skill that evaluates companies and job postings for senior leaders across five dimensions — company trajectory, team maturity, compensation, culture, and regulatory fit. It replaces subjective impressions with sourced research and returns a clear Pursue / Learn More / Pass recommendation. Available as an installable skill file from GitHub.

Sunset Projects

Coming soon.