Security Tooling & Research Suites

Practical Security Tooling Built for Engineering Workflows

Focused security automation covering AWS posture auditing, CI/CD secret and IaC gates, hardened authentication patterns, and adversarial LLM testing.

Verifiable Controls from Code to Cloud

SourceSecured focuses on building lightweight, modular Python tools and CI/CD security workflows that catch misconfigurations, leaked secrets, and application flaws early in the development lifecycle.

Every scanner and evaluation suite is mapped to concrete frameworks like CIS Benchmarks and MITRE ATT&CK, turning security requirements into automated, testable code.

CIS AWS Benchmark Checks21 Automated
LLM Red-Team Payloads40 Across 10 Categories
Secret Detection Rules20+ Rules & Entropy
CI/CD Pipeline CoverageSAST, IaC & Secrets

AWS Security Posture Scanner

Automated Python auditing tool built with Boto3 to evaluate AWS environments for misconfigurations, overly permissive access, and logging gaps against the CIS AWS Foundations Benchmark v1.5.

21 automated checks across IAM, S3, VPC, and CloudTrail
Mock AWS validation and unit testing using Moto and pytest
Static code security verification enforced via Bandit in CI
Structured compliance reporting mapped to CIS controls

Secret Scanner & CI/CD Security Gates

Pre-commit CLI tooling and automated GitHub Actions pipelines designed to block leaked credentials, vulnerable dependencies, and risky infrastructure templates before merge.

20+ regex detection rules combined with Shannon entropy analysis
Pre-commit hook integration to block exposed keys locally
SARIF report generation for direct GitHub Code Scanning ingestion
Automated IaC and Python scanning with Checkov, tfsec, Gitleaks, and Bandit

LLM Prompt Injection & Output Auditing

Red-team evaluation harness and response validator designed to test large language model applications against adversarial system prompt attacks, data leakage, and policy violations.

40 adversarial test payloads spanning 10 distinct attack categories
Canary token injection and tracking for system prompt leak detection
Automated resistance grading from A to F across target models
LLM-as-judge output validation scoring PII leakage and hallucinations from 0 to 10

Secure Authentication & RBAC Reference API

Hardened OAuth2-pattern authentication service built to test and demonstrate defense-in-depth identity controls, session management, and access auditing.

Short-lived JWT access tokens paired with rotation-backed refresh tokens
PBKDF2 password hashing and strict input validation
Role-Based Access Control (RBAC) enforcing least-privilege endpoints
Endpoint rate limiting and structured security audit logging

Technical Ecosystem & Standards

Built around industry-standard security frameworks, cloud APIs, and developer workflows

CI/CD & Code Scanning

  • GitHub Actions
  • Pre-Commit Hooks
  • SARIF Code Scanning
  • Bandit (SAST)
  • Gitleaks

Cloud & Infrastructure

  • AWS (IAM, S3, VPC, CloudTrail)
  • Boto3 SDK
  • Terraform (IaC)
  • Checkov
  • tfsec

AI & LLM Security

  • Prompt Injection Testing
  • Canary Token Detection
  • LLM-as-Judge Validation
  • PII Leakage Scoring
  • Graded Risk Reports

Identity & API Security

  • OAuth 2.0 / OIDC Patterns
  • JWT Access & Refresh Tokens
  • PBKDF2 Hashing
  • Role-Based Access (RBAC)
  • Endpoint Rate Limiting

Security Frameworks

  • CIS AWS Foundations v1.5
  • MITRE ATT&CK Mapping
  • NIST CSF Alignment
  • Least Privilege Design
  • Defense-in-Depth

Testing & Validation

  • Python 3
  • pytest Test Suites
  • Moto (AWS Mocking)
  • flake8 Linting
  • Structured Audit Logging