Automated Defense Built in Code
SourceSecured develops Python security tools, automated CI/CD verification gates, and adversarial LLM evaluation suites mapped to CIS Benchmarks and MITRE ATT&CK.
Core Tooling & Focus Areas
Practical security automation designed to catch misconfigurations, exposed credentials, and application risks early.
Cloud Posture Auditing
Automated Python and Boto3 auditing across AWS IAM, S3, VPC, and CloudTrail mapped directly to the CIS AWS Foundations Benchmark v1.5.
CI/CD & Secret Security Gates
Pre-commit secret scanning using 20+ regex and entropy rules with SARIF output, paired with Bandit, Checkov, and tfsec in GitHub Actions.
Adversarial LLM & AI Testing
Red-team evaluation testing system prompts against 40 adversarial payloads across 10 attack categories with canary token leak detection and risk scoring.
Hardened Identity & Auth Patterns
OAuth 2.0 reference architecture implementing short-lived JWTs, refresh token rotation, PBKDF2 password hashing, RBAC, and audit logging.
Security Embedded in the Workflow
SourceSecured was created to explore how automated security controls can live directly inside everyday engineering pipelines rather than operating as an afterthought.
By combining Python tooling, static and infrastructure-as-code scanning in GitHub Actions, and structured LLM risk evaluations, our work focuses on repeatable, measurable defense.
Read about our methodologyExplore Our Security Tooling Suites
See how we audit AWS cloud posture, enforce CI/CD security gates, and evaluate LLM applications.
View Tooling & Architecture