Projects

These are some of the projects I’m actively involved in — not because they’re trendy, but because they address problems I believe actually matter.

Each one reflects the same principles you’ll find throughout this site: clarity, accountability, and a refusal to accept broken systems as “just the way things are.”

---

Project Broken Mirror

A community-driven effort to improve visibility into the external attack surface of public institutions across the United States.

The goal isn’t fear. It’s awareness — because you can’t protect what you don’t understand.

---

UNSECURITY / UNSECURITY 2.0

A candid examination of why the information security industry keeps failing — despite decades of effort, endless frameworks, and billions of dollars spent.

These books aren’t about tools or compliance. They’re about root causes, incentives, accountability, and the uncomfortable truths we tend to avoid.

---

CvCISO

An education and community initiative designed to help security leaders think more clearly, communicate more effectively, and make better risk decisions in complex environments.

Less theory. More real-world judgment.

---

CISSP Mentor Program

Write something here.

---

F5 Project

Write something here.

 

---

More projects will emerge over time. I care less about building things quickly than building things that hold up.