Open-source tools, labs, research, and technical books I build around detection engineering, offensive testing, application security, and infrastructure hardening. Each project links to its source code and, where available, a live demo.
An open, AI-assisted SecOps platform on the Basic-licensed Elastic Stack: Logstash/Beats ingestion, 30 detection rules, alert-to-incident correlation over NATS JetStream, PII masking, human-reviewed LLM triage, and a read-only MCP server.
An asynchronous Go-based SecOps hub forked from Gophish; orchestrates ProjectDiscovery tools (Nuclei, Subfinder), runs internal network scans over Chisel-based reverse L3 tunnels, and manages phishing simulations.
A scalable lakehouse SIEM/NDR platform built on Kafka KRaft, Spark Streaming, Hadoop HDFS, and Hive, using streaming K-Means for real-time network anomaly detection.
A deliberately vulnerable RESTful API built with Node.js, Express, and MongoDB in a single Docker container for hands-on practice with the OWASP API Security Top 10 (2023).
A Docker-based launcher with a Whiptail TUI and a static dashboard that spins up 15+ vulnerable web labs (OWASP Juice Shop, DVWA, WebGoat, and more) for security training.
An on-premise, open-source enterprise reference architecture for data sovereignty: Ubuntu LTS, RKE2/Rancher, rootless Podman, Samba 4 AD + Authentik (SSO/MFA), Wazuh SIEM/XDR, Ansible provisioning, and network-policy, RBAC, and pod-security hardening guides.
A fully serverless PWA e-commerce platform on Cloudflare (Workers, Pages, D1, R2) built with React, Hono, and Prisma, with edge telemetry, KVKK compliance, and modular payment gateways.
Security analysis of the Model Context Protocol (MCP) ecosystem: an agentic threat taxonomy (prompt injection, tool poisoning), an IEEE-format research paper, and an interactive Slidev presentation.
FP32/INT8 latency and energy-efficiency characterization of Graph Neural Networks on the Intel Core Ultra NPU with OpenVINO and ONNX; IEEE HPEC 2026 paper and interactive poster.
An open-source Turkish web book covering 14 security domains and 49 topics, from identity, data, network, endpoint, cloud, OT/ICS, and AI security to SOC operations, mapped to NIST, ISO 27001, MITRE ATT&CK, and Turkish regulations (KVKK, 5651, BDDK).
An open-source Turkish web book in 12 chapters and 39 sections, from enterprise network architecture to deep packet inspection: Wireshark PCAP analysis, DoS/DDoS and C2 tunnel detection, Active Directory/Kerberos security, NetDevOps, cloud networking, and SOC/NOC network forensics.