WORK · OPEN SOURCE

Projects built for developers and security teams.

Practical tools for API discovery, secure code review, automated security testing, and hands-on technical learning.

Ch3ck3r SAST

A local-first static application security testing tool with OWASP API Top 10 rules, OpenAPI analysis, SARIF reporting, and secure CI release evidence.

SASTAPI SecurityVS Code

View project 02 · Secure code review training

Reviewer

An open-source training platform for identifying and remediating vulnerable web, API, AI, and MCP code through realistic review challenges.

Secure Code ReviewOWASPAI Security

View project 03 · API testing and security lab

Postman API Testing Framework

Postman and Newman automation with mock environments, CI reporting, and a localhost-only service for comparing secure and vulnerable API behavior.

PostmanNewmanSecurity Testing

View project 04 · Chrome extension

API Finder Extension

Passive API reconnaissance with endpoint discovery, request analysis, findings export, and a built-in request tester.

ReconnaissanceBrowser ExtensionOpen Source

View project 05 · Interactive learning platform

API Guardian Game

A hands-on API security learning experience built around real-world attack scenarios and defensive decisions.

API SecurityEducationInteractive

View project