SecOps Flow
DevSecOps lifecycle platform - automated security scanning with Semgrep & Trivy, vulnerability management, 8-phase SDLC pipeline, compliance enforcement, and role-based access control.
NestJSNext.jsPostgreSQLDockerSemgrep
Back to Home
Featured
Featured
Featured
Featured
All Projects
A comprehensive collection of my work in software development, security engineering, DevSecOps, and open-source contributions.
Showing 10 projects
DeployDash
Self-hosted deployment automation platform with one-click SSH deploys, real-time WebSocket logs, auto-polling Git, instant rollback, role-based access, and pipeline editor.
NestJSNext.jsPostgreSQLWebSocketDocker
nest-scan
A static analysis tool for NestJS codebases. Point it at a GitHub repo and it produces a security and code quality report - broken down by analyzer, with AI-powered explanations.
TypeScriptNestJSSecuritySAST
matcha
A Python SAST CLI for JavaScript, TypeScript, NestJS, and Next.js codebases - scans source code for security issues straight from the terminal.
PythonSASTSecurity
cortado
API Threat Modeling Tool - analyzes Postman Collections for security vulnerabilities using STRIDE methodology mapped to OWASP API Security Top 10 (2023).
PythonSecurityOWASPSTRIDE
Sentimen Analisis
Sentiment analysis project built with Python for classifying and analyzing text sentiment.
PythonNLP
E-Commerce Laravel
Full-stack e-commerce application with product management, shopping cart, and order processing.
LaravelPHPMySQLBootstrap
WebGoat
Security testing playground - intentionally vulnerable web application for learning web security.
JavaScriptNode.jsSecurity
Cek Rumah
Property evaluation tool built with Python for assessing and analyzing real estate data.
PythonStreamlit