Home / projects

Projects.

Products, architecture, and labs — with the thinking and building written down. Source on github.com/r1tv1kx.

Product Web Security · OSINTLive

Sentinel

Free plain-English website security toolkit — paste a domain, get a transparent 0–100 score, risk level, and prioritized fixes. No signup. Subdomain finder and fake-link checker included.

Problem

Typical scanners dump CVE codes. Clients and non-security stakeholders need answers they can read out loud.

Approach

FastAPI backend + React/TypeScript frontend. WebSockets for live progress. Findings translated into everyday language with a transparent scoring model.

Result

Three free tools shipping live: website scan, subdomain enumeration, and fake-link checks — open source on GitHub.

FastAPIReactTypeScriptWebSocketsDocker

Live demo ↗ GitHub ↗ Thinking → Building →

Scan flow

Target URL / domain

FastAPI scanner
WebSocket progress

Checks
headers · TLS · exposure · links

Score engine
0–100 · risk level

Plain-English report
React UI

Product Personal AI Cybersecurityv3

SafeSphere

Think Before You Click — personal cybersecurity for everyday people. Paste a link, scan a QR, check an email or download — get SAFE / SUSPICIOUS / DANGEROUS with plain-English next steps.

Problem

Most people are one rushed message away from losing money. They don’t need a SOC dashboard — they need a clear answer in the moment.

Approach

React 19 + TypeScript frontend, FastAPI backend, PostgreSQL + Redis, Docker Compose. v3 moves from reactive checks toward proactive protection.

Result

Production-ready personal security ecosystem — open source, documented for recruiters and collaborators.

ReactTypeScriptFastAPIPostgreSQLRedisDocker

GitHub ↗ Thinking → Building →

Check flow

User input
link · QR · email · file

FastAPI API

Analysis + reputation
Redis cache

Risk decision
SAFE · SUSPICIOUS · DANGEROUS

Plain-English next steps
React UI · PostgreSQL

Architecture Enterprise DLPIn design

Data Loss Prevention Platform

Enterprise DLP architecture for managed Windows endpoints — centralized visibility, sensitive-data detection, device control, and investigation via a unified dashboard. Documented as a system-design repository with local validation in progress.

Problem

Insider threats, accidental leakage, USB abuse, clipboard exfil, and zero visibility into “what happened on this machine?”

Architecture

Windows endpoint agents → event collection (file, clipboard, device, screenshot) → detection & policy engines → alert/block → React dashboard over Node/Express + PostgreSQL.

Status

Architecture & documentation stage; locally deployed for testing. Next milestone: VPS + HTTPS agent registration.

Endpoint agentClipboardUSB controlScreenshot policyReactNode.jsPostgreSQL

Architecture repo ↗ Thinking → Building →

System architecture

Windows Endpoint Agent

Event Collection
file · clipboard · USB · screenshot

Detection Engine

Policy Engine

Alert / Block

React Dashboard
Node · Express · PostgreSQL

Client Design + Engineering2026

Cybrotech.us — company site

Designed and built the public-facing site for Cybrotech Digiventure — homepage, service pages, products, and a live global threat map. Sole designer and developer.

Approach

Next.js + React on Vercel. Authored brand voice and copy. Built a live threat map with attack vector animations.

Result

12 service/product pages covering VAPT, SOC 2, ISO 27001, GDPR, HIPAA — live at cybrotech.us.

Next.jsReactVercel

Visit cybrotech.us ↗ Thinking → Building →

Site structure

Brand & copy

Next.js pages
services · products · about

Threat map
live attack vectors

Vercel deploy

cybrotech.us

Lab Blue team

SilentStrike — Digispark HID lab

Controlled-lab project demonstrating a physical-access HID attack path on Windows, paired with defensive analysis, detections, and mitigations for blue-team learning.

PowerShellDigisparkHIDDetection

GitHub ↗ Thinking → Building →

Lab flow

Physical access

Digispark HID

Payload execution

Detection & logs

Mitigations

Also

Tooling Governance

Security Policy Automation

Python automation that generates ISO/IEC 27001-mapped cybersecurity policies from organizational inputs — audit-ready, not just a Word dump.

PythonISO 27001

GitHub ↗

Writeup Web Security

PortSwigger Web Security Labs

Documented runs through PortSwigger Academy — SQLi, XSS, broken access control — with reproducible Burp payloads and defensive takeaways.

Burp SuiteOWASP Top 10

GitHub ↗

Tooling Forensics

Network Packet Sniffer

Scapy-based sniffer for TCP/UDP/ICMP inspection with structured packet detail for analysis workflows.

PythonScapy

GitHub ↗

Writeup CTF

TryHackMe Writeups

12+ walkthroughs covering privilege escalation, enumeration, and OSINT — also mirrored on GitHub.

CTFPrivesc

GitHub ↗

Web AppSec practice

GameByMood

Mood-based game recommendations — HTML/CSS/JS frontend with a Python backend (Gemini API). Used as a sandbox for API hardening notes.

PythonJavaScriptGemini API

Live demo ↗ GitHub ↗

Projects.

Sentinel

Problem

Approach

Result

SafeSphere

Problem

Approach

Result

Data Loss Prevention Platform

Problem

Architecture

Status

Cybrotech.us — company site

Approach

Result

SilentStrike — Digispark HID lab

Also

Security Policy Automation

PortSwigger Web Security Labs

Network Packet Sniffer

TryHackMe Writeups

GameByMood

Elsewhere