01
Web Development
Production-grade websites and web apps: clear architecture, accessible interfaces, and a deployment path a team can actually own.
Read MoreServices
Cybersecurity
I apply least privilege, careful handling of personal data, current web security practice and a threat review per project. Cisco training informs the baseline; theatrics do not.
A clinic demo must never store medical records. A municipal suggestion box is not a civil-registry database. Scope is a security control. I write that into the architecture before the first form ships.
Practical work includes HTTPS and header hygiene, input validation, least-privilege admin paths, dependency discipline, and a short threat note the client can actually read. I do not sell fear. I sell a product that refuses to be a convenient target.
Training is part of the engagement. The people who will operate the site need to know what not to paste into a log, what not to store, and when to say no.
// deliverables
- Secure-by-design review of the product
- Access model and data-handling rules
- Hardening of public forms and admin paths
- A short, readable threat note and team briefing
open a brief
If the operation is stuck, write.
If you are building a product, modernizing an operation or exploring a digital idea, I would like to hear about it.