Network STIG evidence, automated
Pulls running configs from batches of devices, diffs them against baselines and emits STIG Viewer .ckl checklists in four commands.

Ten-plus years operating classified networks and secure datacenters. Now building tools that make evidence, access and operations easier to manage.
Automated assessment meets human judgment.
ATO work taught me that a finding needs context a reviewer can use. netstig collects network evidence; the editor gives the reviewer space to record findings and export the checklist. Both support CKL; the combined round trip still needs validation.
Read the career evidence ↗Two interfaces. The operator stays in control.
Leading a datacenter team meant making sensitive work understandable and repeatable. Spotter makes command execution a deliberate choice; Bao GUI exposes secret versions, token lifetimes and revocation. They share a design principle, with separate credential stores.
Read the career evidence ↗Human administration. Scoped application access.
At SMX, I migrated infrastructure and engineered microsegmentation that saved $100K+ annually. The platform continues that attention to capability, cost and continuity. Bao GUI administers OpenBao; the website uses a scoped application identity. Load balancing and redundancy are planned.
Read the career evidence ↗Explore the implementation: evidence automation, human review, bounded terminal assistance and secrets administration. Each tool has a distinct job.
Network STIG evidence, automated
Pulls running configs from batches of devices, diffs them against baselines and emits STIG Viewer .ckl checklists in four commands.
A macOS terminal with an AI you set the level on
Four assistance levels from Off to Tandem; secrets stay in the Keychain by reference and every risky command stops at an approval sheet. 1,700+ tests.
STIG review in your browser
Try three preloaded STIGs, import Cyber Exchange packages, record review evidence, and export CKL or CKLB entirely in your browser.
A desktop client for OpenBao secrets
Browses and edits KV v2 secrets with version history, manages tokens and transit keys, and unlocks saved profiles with Touch ID through the macOS Keychain.
Source history, scoped credentials, controlled releases and recovery procedures connect the software to its operating environment. The platform is where I put those responsibilities together.
Explore the architectureOpen-source choices. Ownership of the whole lifecycle.
I define the problem, make the architecture and security decisions, and say where AI helped.Read my approach