// projects
Browser-based tabletops and workshops, hosted right here. No accounts, no installs, no backend — everything you type stays in your browser.
Incident tabletop
An AI agent with cloud credentials starts doing things nobody asked for. Pick a response team, work the evidence as it lands, and commit to decisions you cannot take back. Built for security and engineering teams.
Incident tabletop
A phishing page hosted by the platform itself. Eight seats exist and you fill six — the gaps you leave shape what the room can see. Written for mixed rooms: product, support, legal and data alongside engineering.
Online footprint workshop
Three guided rounds through the places your details actually live, a directory of where to look, and a self-audit that ends in one change you will really make. Everything stays in the browser.
Social engineering workshop
Who targets us and why, what makes a story persuasive, and how public clues make it feel personal. Then teams of two or three build a pretext and the room pulls it apart.
Facilitating one of these? Each session carries its own notes — answer sheets, timings and debrief prompts — linked from inside the page.
Contributor to this open-source tool for enumerating SMB file shares on an internal network.
Contributor — added business-user descriptions and plain-language examples so citizen developers can act on the risks.
Secure development and engineering for agricultural robotics at Lely.
Threat hunting, cloud security controls and penetration testing of LLM- and agent-powered consumer lifestyle assistants for an undisclosed client.
Talks, training and writing live on the experience page.
// contact
For consulting, training, or speaking — reach out and let's talk.
