Hey, I'm Paul 👋

I make stuff, break stuff, and protect stuff from getting hacked.

Security engineering, incident response, offensive + defensive, lots of automation, occasionally questionable humour.

What I'm into right now

Using AI, Agentic workflows, LLMS, etc. around red/purple teaming
Building practical security tooling (stuff teams will actually use)
Security automation / agentic workflows (making the boring bits faster + repeatable)
Detection + response engineering (signal quality > alert spam)

security-skills - A collection of Claude Code skills that help security teams stay secure
shhgit — Secrets detection used by 100s of companies in their CI/CD pipelines
cracke-dit — Password auditing for AD environments
bucket-stream — Bug bounty hunting tool to find interesting S3 buckets by monitoring cert transparency logs
the-endorser — OSINT tool for mapping LinkedIn endorsement relationships

I publish security research + build open source. Sometimes it gets picked up by the media.

Pinned Loading

security-skills

Public

A collection of Claude Code skills that help security teams stay secure

Python 57 21

shhgit

Public

Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories.

JavaScript 4k 476

bucket-stream

Public

Find interesting Amazon S3 Buckets by watching certificate transparency logs.

Python 1.8k 204

the-endorser

Public

An OSINT tool that allows you to draw out relationships between people on LinkedIn via endorsements/skills.

Python 360 54

cracke-dit

Public

cracke-dit ("Cracked It") makes it easier to perform regular password audits against Active Directory environments.

Python 113 35

Needl

Public

Take back your privacy. Lose yourself in the haystack.

Python 562 52