Flagship · Security Projects · Credentials · Open Source · Writing · Stack · Contact
Founder of FreNiMi, a security-first product studio. I build practical security-automation tools for phishing analysis, vulnerability triage, threat detection, CI/CD hardening, and SARIF reporting — plus FreNiMiGuard, a live NIST 800-53/OSCAL compliance platform for public-sector security teams. Findings should be explainable to engineers, reproducible by reviewers, and useful to security leaders.
Start with PhishGuard for a complete product example, then review the merged open-source contributions below for evidence of the same discipline inside established projects.
|
Product Delivery Published on GitHub Marketplace |
Open-Source Trust Merged or active work across OWASP, Prowler, RamenDR, and 6 other open-source organizations |
Security Foundation Security+ · AWS Cloud Foundations · BS Information Technology |
Flagship Project: PhishGuard
PhishGuard is an explainable offline phishing detector for URLs and email. It supports local analysis, CI workflows, GitHub Code Scanning, and security education without sending sensitive inputs to a third-party service.
Try the live demo · View on Marketplace · Review the evidence · Browse the source
- uses: omobolajiadeyan/phishguard-ai@v0.5.1| Capability | Evidence |
|---|---|
| Explainable detection | URL, email, redirect, typosquatting, and authentication-signal analysis with readable reasons |
| Automation | JSON and SARIF 2.1.0 output, reusable GitHub Action, REST API mode, and Code Scanning integration |
| Defensive trust boundaries | SPF, DKIM, and DMARC are supporting evidence—not automatic proof that a message is safe |
| Consistent domain analysis | Public-suffix-aware scoring shared across Python, the web demo, and the browser extension |
Reproducible commands, benchmark results, and evaluator guidance are available in PROJECT_EVIDENCE.md.
| Project | Security outcome | Core stack |
|---|---|---|
| Secrets Scanner | Finds exposed credentials with redacted JSON/SARIF evidence and reusable CI integration | Python, JavaScript, SARIF, GitHub Actions |
| Log Analyzer | Maps suspicious log activity to MITRE ATT&CK and exports reviewable findings | Python, JavaScript, MITRE ATT&CK, SARIF |
| BehaviorSense | Scores user and IP anomalies for UEBA-style insider-threat triage | Python, TypeScript, behavioral analytics |
| CVE Dashboard | Turns live or offline NVD data into severity summaries and exportable triage evidence | Python, JavaScript, NVD |
| VulnGPT | Turns CVE metadata into actionable triage reports with exploitation likelihood and remediation steps | Python, NVD, CVSS/CWE |
| Recognition | What it represents |
|---|---|
| CompTIA Security+ Certified | Validated security operations, architecture, risk, incident response, and governance fundamentals — verifiable on Credly |
| AWS Academy Cloud Foundations | Cloud architecture, shared responsibility, security, pricing, and operational foundations |
| BS, Information Technology | Broad engineering foundation spanning systems, software, data, networking, and technology operations |
| OWASP Contributor | Merged application-security automation work in established OWASP projects |
| GitHub Marketplace Publisher | Took PhishGuard from implementation through packaging, documentation, release, and reusable delivery |
577 contributions in the past year · 385 commits · 113 pull requests opened · 19 PR reviews · pull requests opened across 13 open-source organizations, 6 merged (verified 7 August 2026)
| Community | Merged contribution | Security impact |
|---|---|---|
| OWASP | Agent Security Regression Harness #150 | Added scenario-directory and glob validation for repeatable agent-security testing |
| OWASP | cve-lite-cli #602 | Added risk context and next-action guidance to vulnerability reports |
| Prowler | Prowler #11098 | Added an M365 control for directory-sync object-takeover protection (co-authored, folded in from #11515) |
| SecOps-NG | secops-ng-framework #281 | Extended compliance mappings for the EU Cyber Resilience Act |
| RamenDR | ramenctl #466 | Hardened the software supply chain by pinning GitHub Actions to commit SHAs |
| TruFoundation | TruShell #55 | Fixed a shell-injection vulnerability in the OS fallback path |
Open pull requests awaiting maintainer review aren't listed here — only work that has actually landed. The full dated record, including in-progress contributions and their real status, is in OPEN_SOURCE_LOG.md.
Live data pulled directly from the GitHub API — updates automatically, not a static snapshot.
- SPF, DKIM, and DMARC in Phishing Detection: Useful Signals, Not Magic Answers
- From Single Files to Scenario Suites: Batch Validation in the OWASP Agent Security Regression Harness
- PhishGuard benchmark recall note
Python · JavaScript · TypeScript · Node.js · React · SQLite · Docker · GitHub Actions · SARIF · CodeQL · MITRE ATT&CK · NIST SP 800-53
Building FreNiMi's security-automation product line, open-sourcing what's reusable along the way. Open to technical advisory work, application-security tooling collaboration, and senior security-engineering roles where the work matches this.