Lightweight, self-hosted Entra ID governance portal: track app/identity ownership, surface credential and access risk, and score tenant health — running in your own Azure subscription.

10 hands-on Microsoft Cybersecurity Architect SC-100 labs covering Zero Trust, MCRA, MCSB, ransomware resilience, SIEM, XDR, SOAR, Entra ID, privileged access, Purview, Defender for Cloud, Azure Policy, hybrid and multicloud posture, infrastructure, application, data, AI, and Microsoft 365 security architecture.

Transforms IAM exports into a human-readable identity risk narrative with executive summaries and engineer-focused findings.

Self-hosted open-source credential manager for teams. Share company accounts without exposing passwords. Chrome extension auto-login. One-click offboarding.

Omni-SAG — auditable Linux privileged-access gateway (SSH + SFTP): AD+MFA, single-dialer authz, tamper-evident evidence chain, recording, ICAP inspection, CyberArk injection, four-eyes approvals, control-plane API/TUI. Go modular monolith.

Dedicated Kinetic Gain proof repo for CyberArk platform and company signal coverage. Synthetic board-ready evidence, CLI summary, static report, and CI gate.

CyberArk session-risk console for privilege drift, checkout posture, high-risk access paths, and evidence-ready remediation routing.

Synthetic database activity monitoring and SQL threat detection portfolio covering privileged DBA activity, sensitive table access, suspicious query patterns, alert triage, dashboards, and control mapping.

local proof-of-concept implementing the Sovereign Intent Framework - a runtime governance architecture for agentic AI. Tests deterministic policy enforcement, intent manifest hashing, and audit trail generation against seeded adversarial scenarios.

Free CyberArk practice questions 2026 — 861 questions across 10 exams | certbase.pro

Operator control plane for Microsoft Entra access reviews, privileged-role decisions, stale approvals, and identity-governance remediation posture.

Secure Keyboard Solution for managing cloud assets using Intune and Entra ID

Zero-standing-access AWS break glass system using Entra PIM, Azure Automation, Power Automate and Microsoft Graph API

Privileged change briefing for CyberArk access risk and FirstUp workforce communication evidence.

BeyondTrust is a cybersecurity company specializing in privileged access management (PAM) and vulnerability management solutions. Their products help organizations prevent data breaches, malware attacks, and insider threats by identifying and controlling the access of privileged users, accounts, and credentials across the enterprise.

Network dependent Sudo session logger and logplayback GUI

Enterprise PAM demonstration - HashiCorp Vault + Delinea Secret Server with cross-platform automation, migration tooling, and architecture comparison

Unofficial Docker images for Okta Privileged Access (OPA) ScaleFT client and gateway packages, built from Debian slim and published to GHCR for labs and automation.

A pattern for implementing "insider" encapsulation (trusted/"friend"-only access) of properties and methods in native JavaScript using ES2022 private fields and explicit trust declarations.