PERSONAL PROJECTS
Things I've been
working on.
These are my own projects, outside my day job. Some have public code on GitHub; others are part of the agent environment I use every day.
My daily SOC briefing
Outside my work as a SOC analyst, I build and use AI agents in my own environment. One of those projects is a daily SOC briefing agent. It brings together current vulnerabilities and threat intelligence, including updates from the Dutch NCSC, to help me and my colleagues at work see what needs our attention the most.
I'm also connecting a threat intelligence service to my environment through its MCP, so I can use additional features and indicators of compromise alongside my other sources.
More in this week's journal →My agent environment
I use agents to check my calendar, keep track of appointments, draft and reply to emails, and read the news. That day-to-day use sits alongside the security projects.
The environment is a personal project I work on alongside my job. It gives me somewhere to build things, use them and find out what needs improving.
How I use agents →A vulnerability scanner for my home lab
I have a personal vulnerability scanner for my home lab. Knowing which versions are actually running matters before I ask an agent to update anything. Vulnerability scanning is part of that picture.
The PHP updates brought that point home: an agent can finish the task you gave it without noticing what was outside the task.
The PHP lesson →If AI can write convincing phishing emails, how can we use it to defend against them?
A phishing email can pass sender authentication checks such as SPF, DKIM and DMARC and still get through the filters. I started my email (phishing) helpdesk to give people somewhere to report those emails and have them investigated. It's a personal project alongside my work as a SOC Analyst.
Read about the helpdesk →Public code & experiments
Godspeed
A demo exploring how AI agents could work through a security scenario, and where a person needs to make the decisions.
It uses sample data. The repository has the design notes, code and a recorded demo.
Take a look at Godspeed ↗Pi-hole Easy ACME
Tooling for looking after TLS certificates on Pi-hole, including deployment and renewal. A September update added clearer ACME state handling and recovery for skipped renewals.
View Pi-hole Easy ACME ↗ClawPod
A different kind of project: local music syncing for older Apple devices. It brings together Python and C, with file checks done locally.
View ClawPod ↗