Security Tools

Tools built to solve real problems. Most started as internal tooling for client work and got open-sourced once they proved useful.

TrailTool

CloudTrail for AI agents

Raw CloudTrail is too noisy for AI agents to reason over directly. TrailTool pre-aggregates events into entities (people, sessions, roles, services, resources), so you can ask "What did Alex do yesterday?" and get a useful answer without blowing your context window.

iam-agent-proxy

Credential isolation and least privilege for AWS agents

Agents get fake AWS keys; the proxy re-signs every outbound request with real credentials. Because it intercepts every request, it resolves each one to an IAM action string, generates a least-privilege policy from observed behavior, and enforces it.

GraphGRC

SOC 2 compliance in GitHub

Pre-written SOC 2 controls, policies, and standards in Markdown with semantic linking. Fork it, customize it for your company, and publish a compliance site with GitHub Actions. Your compliance documentation lives in version control, queryable by AI, not locked in a SaaS platform.