SpecQL-APISpy (SpecRecon) combines two complementary capabilities: static API specification analysis and runtime request inspection. What it does Uses SpeQL to analyze Azure REST specifications for risky patterns Uses APISpy to classify live Azure and Microsoft API calls in-browser Maps potential …

CSPeek analyzes Content-Security-Policy and Content-Security-Policy-Report-Only headers from target URLs and converts findings into explainable risk output. What it does Retrieves and parses CSP headers from HTTP responses Identifies weak, missing, or permissive policy patterns Produces …

UndREST-SpecQL is the static-analysis backbone of the UndREST toolchain. It queries and inspects Azure REST specifications to expose high-value behavioral and security signals. What it does Scans Azure REST specs with CodeQL and built-in analyzers Builds structured operation indexes consumed by …

m365-graph-schema-monitor helps track Graph API shape changes over time by acquiring metadata snapshots and comparing CSDL definitions between versions. What it does Captures and stores Graph metadata snapshots Parses entity and type definitions from CSDL Diffs schema changes and renders reviewable …

a-scanner-duskli is the automation engine behind dusk.li. It collects URLs from multiple sources, evaluates dark-mode implementation patterns, and checks color contrast against WCAG2AA criteria. What it does Pulls candidate URLs from curated and discovered sources Runs repeatable accessibility …

Hero Image generated by ChatGPT This is a personal blog and all content therein is my personal opinion and not that of my employer. Secure Google Cloud Authentication in Python: Avoiding CI/CD Pitfalls with Service Accounts Authenticating Python applications to Google Cloud, especially with service …