Security person. Builder by habit.

I'm a security professional who makes the safe path the easy path. I design, build and run pragmatic security programmes: endpoint security, detection engineering, vulnerability management and GDPR/GRC, and governance for AI coding agents.

I turn regulation, policy and risk into controls that are practical to execute and easy to adopt, and I build the telemetry that catches what controls miss.

I also like building things. The websites I make on the side are where I get to be playful: fast, static-first, and usually hiding something.