How I Built Xternal: Production AI Systems Beyond the Chat Box
The product and positioning decisions behind Xternal, a company focused on custom agents, workflow automation, AI enablement, and practical platform replacements.
How I Built Aegis SOC Analyst: Turning Noisy Telemetry Into Actionable Incidents
The architecture, detection logic, and product decisions behind my SOC platform, from normalizing five telemetry sources to generating evidence-grounded incident narratives.
How I Built Fixr: An AI Troubleshooter That Can See the Problem
What it took to combine text, photos, and live camera input into practical hardware troubleshooting without letting the AI guess recklessly.
How I Built Khan OS: Designing a Multimodal AI Workspace Around Intent
A behind-the-scenes look at the voice, tool-use, live-data, and interface decisions behind my neural operating system concept.
How I Built an Automated Java and Python Grading Engine
How I combined a Java test harness, Python orchestration, isolated execution, and readable feedback to grade code consistently at scale.
How I Built Aegis Intelligence: Giving Reconnaissance Data a Security Narrative
How I turned Nmap and Gobuster output into an AI-assisted penetration-testing workflow with OSINT enrichment, attack-path thinking, and evidence-backed findings.
How I Built Flight Tracker: Making Four Live Data Sources Feel Like One Product
The routing, geospatial, flight-phase, and reliability decisions behind my real-time flight intelligence platform.
How I Built FinSight: An AI Financial Workflow With Traceable Decisions
How document extraction, agentic reasoning, and compliance checks became an audit-friendly workflow for KYC and AML review.
How I Built an Airport Operations Simulator
How I modeled aircraft movement, gate pressure, disruptions, and resource decisions without pretending a simulation is the real airport.
How I Built an Employee Scheduling and Team Management System
The full-stack and mobile decisions behind a scheduling platform with real-time updates, shift swaps, and role-based access.
How I Built InterviewAI: Practice That Adapts to the Candidate
How resume analysis, personalized questions, timed interviews, and structured feedback came together in one preparation platform.
How I Built The Forge: Creating, Analyzing, and Securing Complex Documents
The architecture behind an AI document platform for contract risk, agreement generation, and guided tax-form completion.
How I Built an Encrypted File Vault With Client-Side Protection
How AES encryption, PBKDF2-derived keys, S3 signed URLs, access control, and audit logs fit together in a secure storage prototype.
How I Built AI Agents for Cybersecurity and Financial Analysis
What I learned from building a shared agent framework across two domains with different data, models, and risk boundaries.
How We Built an Astronaut Health Dashboard at NASA Space Apps
A human look at building a real-time Flask and JavaScript prototype under hackathon pressure, including scope decisions and team tradeoffs.
Security Logs Are Not a Story Until You Give Them Context
Why timestamps and event IDs are only the beginning, and how identity, asset, and business context turn raw logs into useful security evidence.
Least Privilege Sounds Simple Until You Map Real Access
What permission inheritance, groups, sharing links, and exceptions teach us about the real work of reducing excessive access.
Offboarding Is a Security Workflow, Not an Account Disable
Why disabling the primary account is only the first step, and how to reason about the residual access window across modern environments.
The Human Cost of Alert Fatigue in a SOC
Alert fatigue is not just a tuning problem. It changes attention, judgment, and trust, which makes it a security risk of its own.
How to Make AI Security Decisions Explainable
A practical framework for showing the evidence, rules, uncertainty, and human checkpoints behind AI-assisted security decisions.
Threat Intelligence Is Only Useful When It Changes a Decision
How to move beyond endless indicator feeds and build intelligence that supports detection, prioritization, and response.
Secure File Uploads: The Attack Surface Hiding Behind One Button
A practical look at validation, storage, authorization, malware scanning, and safe delivery for one of the web's most underestimated features.
DevSecOps for Small Teams: Start With the Checks That Earn Trust
A realistic way to add security to CI/CD without overwhelming developers with noisy scanners and brittle gates.
What Makes a Cybersecurity Portfolio Project Credible?
How to move beyond polished dashboards and show the threat model, evidence, tradeoffs, and limitations that make a security project believable.
Designing Real-Time Data Pipelines That Fail Gracefully
Lessons for combining live APIs, streaming updates, caching, and fallbacks without turning temporary failures into a broken product.
OSINT Without Overreach: A Practical Ethics Checklist
How to collect public information for security work while respecting authorization, privacy, provenance, and proportionality.
Building a Home Cybersecurity Lab That Teaches You to Investigate
A student-friendly lab plan built around evidence and questions, not an expensive collection of tools.
Ransomware Defense: Prevention, Detection, and Recovery Strategies
A comprehensive guide to protecting organizations from ransomware attacks, covering backup strategies, endpoint detection, network segmentation, and incident response playbooks.
Multimodal AI: Combining Vision, Voice, and Text in One Agent
Architectural patterns for building AI assistants that process camera feeds, voice commands, and text prompts simultaneously, with lessons from building Fixr and Khan OS.
How AI is Transforming Penetration Testing
From automated recon to intelligent vulnerability prioritization, exploring how agentic AI systems like Aegis Intelligence are reshaping offensive security workflows.
Web Application Security: OWASP Top 10 Deep Dive
Practical analysis of the most critical web application security risks, with real-world examples, exploitation techniques, and secure coding practices to prevent each vulnerability.
Understanding DDoS Attacks on Financial Institutions
Deep dive into attack vectors, amplification techniques, and layered mitigation strategies for protecting financial infrastructure from volumetric and application-layer DDoS attacks.
Cloud Security Fundamentals: AWS, Azure, and GCP Security Controls
Understanding shared responsibility models, identity and access management, network security groups, and encryption in major cloud platforms.
Building Secure Authentication Systems from Scratch
A practical guide to implementing multifactor authentication with TOTP, secure password hashing using bcrypt, and defense against brute force and credential stuffing attacks.
Day in the Life of a SOC Analyst: Tools, Workflows, and Alert Triage
Inside look at Security Operations Center workflows, from initial alert triage to incident escalation, including essential tools like SIEM, SOAR, and threat intelligence platforms.
Introduction to Threat Hunting: Proactive Security Beyond Alerts
How to proactively search for threats that evade automated detection, including hypothesis-driven hunting methodologies, essential data sources, and practical hunting techniques.
AI in Cybersecurity: Detecting Network Anomalies
How machine learning models trained on network telemetry can identify zero-day threats, lateral movement, and data exfiltration in real-time enterprise environments.
Full Stack Development for Hackathons: Lessons from NASA Space Apps
Key strategies for rapid prototyping under pressure: choosing the right stack, dividing frontend and backend work, and shipping a working demo in 24 hours.
Zero Trust Architecture: Beyond the Perimeter
Why traditional perimeter-based security fails in cloud-native environments and how zero trust principles, micro-segmentation, and continuous verification create resilient defense.
From Help Desk to Cybersecurity: Building an IT Career Path
How hands-on IT support experience at DePaul became the foundation for a cybersecurity career, including tips on certifications, lab projects, and transitioning from Tier 1 to security roles.