Flagship · Security Projects · Credentials · Open Source · Writing · Stack · Contact
Founder of FreNiMi, a security-first product studio. I build practical security-automation tools for phishing analysis, vulnerability triage, threat detection, CI/CD hardening, and SARIF reporting — plus FreNiMiGuard, a live NIST 800-53/OSCAL compliance platform for public-sector security teams. Findings should be explainable to engineers, reproducible by reviewers, and useful to security leaders.
Start with PhishGuard AI for a complete product example, then review the merged open-source contributions below for evidence of the same discipline inside established projects.
|
Product Delivery Published on GitHub Marketplace |
Open-Source Trust Merged or active work across OWASP, Prowler, RamenDR, and 6 other open-source organizations |
Security Foundation Security+ · AWS Cloud Foundations · BS Information Technology |
Flagship Project: PhishGuard AI
PhishGuard AI is an explainable offline phishing detector for URLs and email. It supports local analysis, CI workflows, GitHub Code Scanning, and security education without sending sensitive inputs to a third-party service.
Try the live demo · View on Marketplace · Review the evidence · Browse the source
- uses: omobolajiadeyan/phishguard-ai@v0.5.1| Capability | Evidence |
|---|---|
| Explainable detection | URL, email, redirect, typosquatting, and authentication-signal analysis with readable reasons |
| Automation | JSON and SARIF 2.1.0 output, reusable GitHub Action, REST API mode, and Code Scanning integration |
| Defensive trust boundaries | SPF, DKIM, and DMARC are supporting evidence—not automatic proof that a message is safe |
| Consistent domain analysis | Public-suffix-aware scoring shared across Python, the web demo, and the browser extension |
Reproducible commands, benchmark results, and evaluator guidance are available in PROJECT_EVIDENCE.md.
| Project | Security outcome | Core stack |
|---|---|---|
| Secrets Scanner | Finds exposed credentials with redacted JSON/SARIF evidence and reusable CI integration | Python, JavaScript, SARIF, GitHub Actions |
| Log Analyzer | Maps suspicious log activity to MITRE ATT&CK and exports reviewable findings | Python, JavaScript, MITRE ATT&CK, SARIF |
| BehaviorSense | Scores user and IP anomalies for UEBA-style insider-threat triage | Python, TypeScript, behavioral analytics |
| CVE Dashboard | Turns live or offline NVD data into severity summaries and exportable triage evidence | Python, JavaScript, NVD |
| VulnGPT | Turns CVE metadata into actionable triage reports with exploitation likelihood and remediation steps | Python, NVD, CVSS/CWE |
| Recognition | What it represents |
|---|---|
| CompTIA Security+ Certified | Validated security operations, architecture, risk, incident response, and governance fundamentals — verifiable on Credly |
| AWS Academy Cloud Foundations | Cloud architecture, shared responsibility, security, pricing, and operational foundations |
| BS, Information Technology | Broad engineering foundation spanning systems, software, data, networking, and technology operations |
| OWASP Contributor | Merged application-security automation work in established OWASP projects |
| GitHub Marketplace Publisher | Took PhishGuard AI from implementation through packaging, documentation, release, and reusable delivery |
523 contributions in the past year · 338 commits · 107 pull requests opened · 18 PR reviews · pull requests opened across 13 open-source organizations, 6 merged (below)
| Community | Merged contribution | Security impact |
|---|---|---|
| OWASP | Agent Security Regression Harness #150 | Added scenario-directory and glob validation for repeatable agent-security testing |
| OWASP | cve-lite-cli #602 | Added risk context and next-action guidance to vulnerability reports |
| Prowler | Prowler #11098 | Added an M365 control for directory-sync object-takeover protection (co-authored, folded in from #11515) |
| SecOps-NG | secops-ng-framework #281 | Extended compliance mappings for the EU Cyber Resilience Act |
| RamenDR | ramenctl #466 | Hardened the software supply chain by pinning GitHub Actions to commit SHAs |
| TruFoundation | TruShell #55 | Fixed a shell-injection vulnerability in the OS fallback path |
Open pull requests awaiting maintainer review aren't listed here — only work that has actually landed. The full dated record, including in-progress contributions and their real status, is in OPEN_SOURCE_LOG.md.
Live data pulled directly from the GitHub API — updates automatically, not a static snapshot.
- SPF, DKIM, and DMARC in Phishing Detection: Useful Signals, Not Magic Answers
- From Single Files to Scenario Suites: Batch Validation in the OWASP Agent Security Regression Harness
- PhishGuard benchmark recall note
Python · JavaScript · TypeScript · Node.js · React · SQLite · Docker · GitHub Actions · SARIF · CodeQL · MITRE ATT&CK · NIST SP 800-53
Building FreNiMi's security-automation product line, open-sourcing what's reusable along the way. Open to technical advisory work, application-security tooling collaboration, and senior security-engineering roles where the work matches this.