Web security
- OWASP Top 10
- Input validation
- Security headers
- Privacy-aware data flows
Cybersecurity
Security is an engineering decision from the first line.
Applied web security, identity, access control, networking, and secure development.
01 / Security-first approach
Security-first approach
The aim is not to add a decorative security layer. It is to reduce risk while choosing the architecture, data flows, permissions, and content-handling model.
01Design02Identity03Validation04Data05Monitoring
02 / Capability matrix
Verified learning applied in real products.
Authentication, access control, input validation, and data protection belong in system design—not in a late checklist.
Secure development
- Security-first architecture
- Server-side validation
- Safe content handling
- Least privilege
Identity & access
- Authentication
- Role-based access control
- Firebase Auth
- Session-aware workflows
Testing & assessment
- Penetration testing
- Vulnerability analysis
- Responsible reporting
- Remediation thinking
Networking
- TCP/IP
- Ports
- Routing
- Switching
Research model
- Sanitized write-ups
- Impact and severity
- Disclosure status
- Remediation
03 / Related credentials
A theoretical foundation with applied training.
Foundations of Cybersecurity
Google / Coursera
Cyber Security Diploma (150 Hours)
Instant Software Solutions
Penetration Testing Training
Instant Software Solutions
CCNA Course (32 Hours)
Black Horse Courses
04 / Security-related work
Systems handling identity, permissions, and sensitive data.
01Development2025
Mentally
An AI-assisted mental health platform combining sentiment analysis, psychological assessments, multilingual support, and secure authentication.
View project
DevelopmentSelected work
Elkanisa
An integrated church platform bringing Bible resources, hymns, Orthodox content, attendance, and presentation tools into one fast PWA.
View project05 / Research & responsible disclosure
Ready for sanitized, responsible write-ups.
There are no public security findings published at this time, so this portfolio does not invent any. The admin model is ready for vulnerability type, severity, impact, general methodology, remediation, and disclosure status—without secrets or sensitive data.
