Projects
A mix of systems programming, developer tooling, and security-focused work.
portfolio-ssh
A custom SSH server written in Go that powers a terminal-based portfolio. Users authenticate via a cryptographic challenge-response flow using Ed25519 SSH keys. Features rate limiting, session timeouts, and max concurrent connection enforcement. Hosted on AWS EC2 with Route 53.
ssh ssh.ziltonportfolio.ioportfolio-tui
An interactive terminal UI portfolio application built in Python using the Textual framework. Navigate sections entirely from the keyboard. Markdown-driven content system for easy updates. A developer-focused alternative to a traditional web portfolio.
Continuous Threat Model Verification
In progressA CI/CD tool that verifies Threagile threat models against Terraform and application code, failing the build when the model drifts from what's actually deployed. Can also serve as a check on AI-generated security artifacts.
compile-sast
A Kotlin compiler plugin, published on Maven Central and the Gradle Plugin Portal, that catches OWASP and CWE-mapped vulnerabilities as build-time compiler errors.