Offensive and cloud security

Brian Montiel

Building cloud security

Security analyst, hacker, and builder focused on FedRAMP, cloud security, and building tools that make compliance work less painful.

11Projects
5Certifications
7HTB writeups
Brian Montiel

Ship the evidence
before they ask.

01 / workspace

Projects

POA&M Automation Tool

Turns Nessus, Tenable, Qualys, and Wiz exports into FedRAMP compliant POA&Ms. Maps findings to NIST 800-53, drops duplicates, and builds VDR reports with CISA KEV and EPSS lookups.

SecurityGRCAutomation
View repo

CloudGRC

Collects evidence across AWS, Azure, and GCP. Covers 180+ resource types and 230+ automated checks mapped to NIST 800-53, then packages them into bundles a reviewer can open.

CloudGRCSecurity
View repo

CMMC Toolkit

Terminal CLI for CMMC 2.0 readiness. Gap assessment with SPRS scoring, an SSP builder that exports several formats, and a searchable library of all 110 practices.

GRCSecurity
View repo

Pentest-Deephat-AI

Local first notebook for pentests and CTFs, with AI help, Markdown editing, and notes you can export.

SecurityAutomation
View repo

OCR Screenshot Renamer

Renames screenshots from visible text and image content, turning generic names into readable files like aws-vpc-route-tables.png.

SecurityAutomation
View repo

02 / stack

Skills and tooling

Cloud and infra

AWSAzureGCP DockerLinux

Offensive security

Penetration testingRed teaming C2 / CRTOHTB / CTFOSINT

GRC and compliance

FedRAMPNIST 800-53 CMMC 2.0POA&MSPRS

Languages and tooling

PythonRustTypeScript BashSolana / Anchor

03 / writeups

Labs

04 / credentials

Badges and certifications

CRTO certification badge

CRTO

PNPT certification badge

PNPT

School of Solana season 8 badge

School of Solana S8

eJPT certification badge

eJPT

CompTIA CySA+ certification badge

CySA+

05 / connect

Contact