Hanaan Mir

Uptime Pulse

An uptime monitoring dashboard with real HTTP and TLS checks, automatic incident detection and SLA reporting.

• Probes HTTP(S) endpoints and sorts failures into timeouts, DNS errors, refused connections, non-2xx responses and TLS errors
• Tracks SSL certificate expiry with a TLS handshake for every HTTPS monitor
• Opens and closes incidents automatically and reports SLA compliance over 24-hour, 7-day and 30-day windows

$Run it with: npm run check

• Next.js
• TypeScript
• Prisma
• SQLite
• Vitest

DNS Doctor

Live DNS health checks built around the classic support ticket: why is my email going to spam?

• Looks up A, AAAA, MX, TXT, NS, CNAME and SOA records with dnspython
• Queries Google, Cloudflare and the local resolver side by side and flags answers that differ
• Audits SPF, DKIM and DMARC and explains every finding in plain language

$Run it with: docker run -p 5000:5000 dns-doctor

• Python
• Flask
• dnspython
• pytest
• Docker

PacketLens

Upload a packet capture and get a real, Scapy-parsed traffic dashboard with automatic port scan and flood detection.

• Parses every packet in .pcap and .pcapng files, with no mock or hardcoded data
• Charts protocols, traffic over time, the top source and destination IPs and the top talkers
• Flags port scans and floods with the evidence and a plain-language explanation

$Run it with: python wsgi.py

• Python
• Flask
• Scapy
• pandas
• Chart.js

Attack Path Mapper

Shows how one exposed asset could reach critical systems through trust relationships, and where to break the chain.

• Models assets, trust links and known weaknesses as a directed security graph
• Scores every path from entry point to target by exposure, weakness severity and asset criticality
• Recommends defensive choke points, with no exploitation, scanning or credential attacks

$Run it with: node dist/index.js sample-lab.json internet finance-db

• TypeScript
• Node.js
• Zero runtime dependencies

Zero Trust Lens

Answers who can reach what, and why, by evaluating Zero Trust access policies.

• Evaluates role, device trust and network zone conditions for every identity and service
• Flags wildcard rules and overly broad access
• Names the exact rule behind every allow or deny and exports a JSON reachability matrix

$Run it with: go run . -policy sample_policy.json

• Go
• No third-party dependencies

SOC Forge

A local-first SOC investigation tool that turns scattered security events into one explainable incident timeline.

• Normalizes authentication, DNS, endpoint and application events into a single model
• Correlates related activity by user, host and IP address
• Scores incidents with readable rules, from failed-then-successful logins to suspicious DNS labels

$Run it with: python soc_forge.py --events sample_events.json --serve

• Python standard library
• HTML
• JavaScript

Sentinel Twin

A network digital twin that simulates outages and shows the blast radius before it happens.

• Builds device and dependency models from a JSON topology
• Simulates failed devices, dead links and degraded connections with latency and packet loss penalties
• Estimates business impact from node criticality and writes a readable incident report

$Run it with: python sentinel_twin.py sample_topology.json --fail-device core-sw-1

• Python standard library

Glass Hero Portfolio

An interactive portfolio hero where a glass-style reveal follows the cursor across a portrait.

• Layers two portraits and reveals one through a soft-edged, pointer-tracked radial mask
• Eases motion in a requestAnimationFrame loop, with mouse and touch sharing one Pointer Events path
• Respects reduced-motion settings and is deployed on Vercel

• Next.js
• React
• TypeScript
• Tailwind CSS
• CSS Modules