DT-cyberworks
Security engineering: attack surface management, hardened infrastructure and secure self-hosting.
I build and operate systems that are hard to attack and easy to recover. This site is where I publish open-source security tools and practical write-ups.
What I work on
- Attack surface management - finding and tracking what an organisation exposes to the internet: hosts, certificates, web and mail services.
- Infrastructure and container hardening - least-privilege Linux hosts, Docker setups with read-only filesystems and dropped capabilities, firewalling that holds up against how Docker really works.
- Secure self-hosting - TLS and certificate lifecycle, mail authentication (SPF, DKIM, DMARC), reverse proxies and security headers done properly.
- Backup, monitoring and recovery - encrypted, versioned offsite backups, restore tests, and alerts that actually fire.
Open source
Latest from the blog
- Welcome to the DT-cyberworks blog
What this blog covers and where to find the code.