I've written code and whitepapers to solve problems encountered by my clients. If my work helps you to secure your world, consider giving me a coffee or bottle of scotch.

Some of my useful security tools:

• Image Location and Privacy Scanner for BurpSuite and ZAP Proxy
• Smoke, a modern take on hash digest encapsulation

And some security blog posts referenced by many infosec folks in pen tests reports and compliance audits:

• Remove Insecure HTTP Headers, aka Bad headers and how to remove them from many vendor web servers, proxies, routers, tunnels, loads balancers, custom code, etc
• Useful HTTP Security Headers, aka Good headers and which ones are actually useful
• Swinging the Compliance Hammer at Obsolete Crypto - Arguments to management to get funding for uplifting your weak encryption

If you reference my blogs for your corporate conglomerate, consider expensing a sponsorship under your company's "Reference Materials" expense code as some people have.