A web-managed open source firewall, rebuilt on Debian 13. A fork of OPNsense re-engineered to run natively on Linux: nftables, systemd, iproute2 and apt.

A compact, self-contained lab that demonstrates real-time intrusion detection and automated response using an IDS script (Scapy), Cisco router ACLs (Netmiko), and victim host hardening (Paramiko + iptables).

Security-focused distributed NAS platform built using Nextcloud, Docker, Grafana, Prometheus, and fail2ban with real-time monitoring, security event logging, brute-force detection, infrastructure observability, and centralized dashboard monitoring.

A modular Python-based SIEM/IPS that monitors system logs in real-time (Sentinel) and automates threat response (SOAR). It features Regex-based log normalization, hybrid event correlation (SSH/Web), and automated firewall blocking integrated with AbuseIPDB and Discord alerts.

Segmented enterprise network lab with pfSense, Suricata IDS/IPS, and attack simulation

NT405 - Cyber Security

A cloud-native security lab on AWS that automates threat detection and compliance enforcement. Deploys a 3-tier VPC with Suricata IDS/IPS, ModSecurity WAF, Duo MFA, WireGuard VPN, and ELK Stack — all provisioned via Terraform, configured with Ansible, and continuously validated with InSpec compliance-as-code checks.

PiNetCore - Production-ready Raspberry Pi 5 network appliance. Rust-based packet capture engine with modular plugin architecture, nftables firewall, and TypeScript/React dashboard. Features inline bridge mode, VPN integration (WireGuard/OpenVPN), IDS/IPS support, and centralized logging. Built for home labs and advanced network control.

Projet de fin de formation: infrastructure reseau securisee avec pfSense, PKI, OpenVPN, pfBlockerNG et Snort IDS/IPS.

Autonomous IDS/IPS with ensemble ML voting, post-quantum cryptography, Kubernetes Zero Trust, self-healing watchdog, and live SOC dashboard

Documentation of a ransomware security incident at a healthcare clinic using the 5 W's framework for incident handling and reporting.

Fully segmented home network with OPNsense, Suricata IDS/IPS, VLAN isolation, WireGuard VPN and TIG monitoring stack. Defense-in-depth architecture with 7 isolated zones.

SentinAI: A localized SOC toolkit and Hybrid IDS/IPS utilizing a dual-engine architecture (Heuristics + ML/IsolationForest) for real-time network threat detection.

piggy that sniff terror in the net :`0

Free, interactive course on firewalls & network security, built around OPNsense — 5 modules, 13 lessons, 51 quizzes. Runs entirely in your browser.

A modular, plug-and-play Intrusion Detection & Prevention platform where AI models and blockchain ledgers hot-swap into a decoupled core engine — real-time monitoring, automated prevention, and tamper-evident logging by design.

A real-time, log-based Intrusion Detection (IDS) & Prevention System (IPS) featuring a custom Python regex engine, stateful sliding-window attack detection, automated firewall rule generation (iptables/Windows Defender), and an obsidian-themed React SOC Analyst Dashboard.

Projecte intermodular ASIX: Docker, Kubernetes, Helm, Istio, Ansible i Suricata IDS/IPS. Del contenidor local a la producció cloud-native amb ciberseguretat activa.

Real-time Network Traffic Analysis Engine capable of processing high-velocity data streams to detect statistical anomalies using Z-Score & Context-Aware filtering.

Automated network incident detection and response system. Suricata IDS/IPS, automated IP blocking, forensic analysis dashboard. Graded 10/10.