Cloud IAM Sentinel
An automated real-time auditor for AWS and GCP IAM policies that detects privilege escalation vectors and unused administrator entitlements.
Work
A collection of security tooling, infrastructure-as-code libraries, and architectural prototypes.
KubeIdentity Proxy
A Kubernetes admission controller and sidecar proxy enforcing SPIFFE identity validation across pod-to-pod communications.