Projects
Outside CTO writes software as well as advising on it. These are the current projects.
notion_publish
A command-line tool that publishes Markdown files from a Git repository into Notion, and then keeps those pages up to date. Git stays the copy of record and Notion shows a current version of it. It was built for a security and compliance corpus, where an auditor can reasonably ask which Notion page matches a given policy, and where "somebody pasted it in last spring" is not a good answer.
Faultlean
A web application for running a vulnerability disclosure and reward program. Researchers submit reports, the people who triage them work through a review queue, and rewards are tracked against each report. It is built with Ruby on Rails.
Segfaulter
A workshop game that teaches people who do not work in security what a company actually buys when it buys security, and what it costs when it does not buy enough. A game master runs the session from a browser and projects a second screen for the room, and everybody else plays on a phone. Teams take on a fictional healthcare software company and spend a security budget across three rounds.