OSCAL Pocket Guide
Mobile app for exploring NIST cybersecurity documents related to OSCAL on the go.
Open projectMaryland • Security & Compliance Engineer
I design DevSecOps tooling that turns NIST, OSCAL, and FedRAMP-heavy workflows into practical systems engineers can ship with.
Flagship Product
A mobile reference for compliance engineers, security practitioners, and builders working with OSCAL, NIST guidance, and FedRAMP documentation.
The goal is simple: make the source material easier to navigate from anywhere so teams can move faster without losing the compliance thread.
Why it matters
Current Projects
Mobile app for exploring NIST cybersecurity documents related to OSCAL on the go.
Open projectEvidence-backed portfolio project for LoRA fine-tuning, dataset-quality analysis, and authorization-evidence workflows for an on-prem cybersecurity LLM.
Open projectClaude Code skills plus a sandboxed agent pipeline for finding, verifying, patching, and exporting vulnerability findings as OSCAL evidence.
Open projectAI-powered STRIDE threat modeling with interactive attack surface visualization.
Open projectGitHub CLI extension that scans repos, auto-detects NIST 800-53 control implementations, and generates FedRAMP-ready OSCAL SSPs with AI-powered validation.
Open projectMultimodal AI compliance automation that maps evidence to NIST 800-53 and generates OSCAL artifacts using Gemini 3 Pro.
Open projectAgent-native infrastructure management control plane with secure tool gateways.
Open projectVoice-first FedRAMP agent using Gemini Live for real-time NIST 800-53 control mapping, gap analysis, and OSCAL document generation.
Open projectHierarchical multi-agent federal compliance assessment engine powered by AWS Bedrock (Amazon Nova) with evidence-driven findings and POA&M output.
Open projectWhat I'm Building
Turning NIST 800-53, OSCAL, and FedRAMP requirements into developer-friendly tooling.
Using Copilot, RAG pipelines, and LLM systems to connect policy with code.
Making federal-grade security workflows more accessible through automation and CLIs.
Highlights
Started an OSCAL discussion with NIST around a new reference taxonomy model.
Read discussionBuilt OSCALFlow for the GitHub + MCP Hackathon as a native CLI for valid OSCAL 1.2.0 JSON.
View OSCALFlowOSCALFlow detects 50+ control implementations across 8 languages with AI-powered validation.
See detailsGitHub Activity
Connect