D

devsecops

Skaledheim (SKM) is a modular platform designed to orchestrate distributed services inside a cohesive DevSecOps cluster oriented ecosystem.

Enterprise-grade toolkit to audit and migrate legacy infrastructure to hybrid post-quantum cryptography (PQC).

Deterministic, format-preserving dependency remediation for GitLab CI — Maven first. A hundred eyes on your dependency graph.

Static security scanner and linter for GitLab CI. Finds .gitlab-ci.yml misconfigurations, supply-chain risks, and leaked secrets. Offline, SARIF output, OWASP CICD-SEC and CWE mappings.

Peerivo Reviewer — fail-closed security review for GitLab merge requests. Checks secrets, CI/CD permissions, supply chain, dependencies, migrations and runtime boundaries without executing MR code.

DevSecOps health check for GitLab Self-Managed instances.

The landing page and the ten scenarios. The thesis, the claims ledger, and the public posture mirror an assessor can check without an account.

Chapter 4: a Go binary at report phase. Gaps are published and advisory, so the merge request stays green while the finding rides along.

Chapter 6: a CI component at enforce phase. The off-catalog include is planted, and the red pipeline is the point: watch the gate stop it.

Chapter 3: the driver. One tool provisions the group, assesses each control, pushes verdicts, and exports OSCAL.

Chapter 5: a container image at cutover phase. The unsigned-image gap is planted, and the red pipeline is the point: watch the floor block it.

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Scan your WordPress core, themes and plugins for known CVEs from the command line. Open source, auditable, privacy-first — powered by the ValtersIT CVE API.

Scan installed Linux packages and services for known CVEs from the command line. Open source, auditable, privacy-first — powered by the ValtersIT CVE API.

Scan Docker images and containers for known CVEs from the command line. Open source, auditable, privacy-first — powered by the ValtersIT CVE API.

Scan installed Windows software for known CVEs from PowerShell. Open source, auditable, privacy-first — powered by the ValtersIT CVE API.

Open-source CVE scanners for WordPress, Linux, Docker and Windows — one command, a list of the CVEs that affect your stack. Powered by the ValtersIT CVE API.

Hands-on cybersecurity portfolio demonstrating SOC automation, Sigma/KQL detection engineering, incident-response playbooks, GitLab CI/CD security gates, supply-chain security, container hardening, and IaC scanning using controlled synthetic laboratory evidence.

Medium-interaction SSH/Telnet honeypot built with Cowrie, Loki, Promtail, and Grafana - provisioned on DigitalOcean via Terraform with a GitLab CI validation pipeline.