M&L AI
AI-driven software focused on defensive cybersecurity.
I make AI-driven software with a focus on defensive cybersecurity — local-first, open source, and built to respect the people who use it.
What I build
AttackMap
A local-first, open-source defensive security analysis engine. Point it at a repository and it maps the attack surface, traces request-to-sink data flow, and produces prioritized, evidence-anchored findings mapped to MITRE ATT&CK — without sending code off-device. Optional AI review helps triage and explain what to fix first. Output is oriented entirely toward remediation.
AttackMap is under active development, but progress may be slow until more contributors and co-maintainers join. If you'd like to help with the engine, an analyzer, the macOS app, or the docs, open an issue to say hello.
grrclone
A free, open-source macOS menu bar app that connects rclone remotes as Finder volumes. It discovers your remotes, reconnects at login, and repairs mounts after sleep or a network change. No licence key, no phone-home, no kernel extension, no root.
Latest writing
All posts →Security findings in an Anpviz IPC-D240W-S camera
A documented look at stock camera firmware: confirmed behavior, static findings, and the limits of the evidence.
D850 thoughts
Thoughts on the D850, keep? Not keep?
Happy Holidays!
Happy Holidays
How to unlock a LUKS2 disk with a TPM2 chip
LUKS2 & TPM2
I contribute to the Fedora Magazine, what about you?
Open Source Software