POA&M Automation Tool
Turns Nessus, Tenable, Qualys, and Wiz exports into FedRAMP compliant POA&Ms. Maps findings to NIST 800-53, drops duplicates, and builds VDR reports with CISA KEV and EPSS lookups.
Offensive and cloud security
Building cloud security
Security analyst, hacker, and builder focused on FedRAMP, cloud security, and building tools that make compliance work less painful.
Ship
the
evidence
before
they
ask.
01 / workspace
Turns Nessus, Tenable, Qualys, and Wiz exports into FedRAMP compliant POA&Ms. Maps findings to NIST 800-53, drops duplicates, and builds VDR reports with CISA KEV and EPSS lookups.
Terminal CLI for CMMC 2.0 readiness. Gap assessment with SPRS scoring, an SSP builder that exports several formats, and a searchable library of all 110 practices.
Local first notebook for pentests and CTFs, with AI help, Markdown editing, and notes you can export.
A demo trust center for FedRAMP 20x experiments and hands on learning.
Renames screenshots from visible text and image content, turning generic names into readable files like aws-vpc-route-tables.png.
Built with PDAs, wallet login, and TypeScript tests.
Python desktop tool that groups screenshots into evidence folders, one folder per session.
Offline checklist for FedRAMP and NIST 800-53 assessments, with a place to track evidence.
Local scanner for malware checks and scan evidence you can hand to an auditor.
Nothing in this filter. Try another tag.
02 / stack
03 / writeups
04 / credentials

CRTO

PNPT

School of Solana S8

eJPT

CySA+
05 / connect