🚀 Just built and deployed to production «DEFENSA TI»: an automated perimeter security auditing and compliance engine.
Many organizations still rely solely on having an active SSL certificate, overlooking critical transport headers and TCP socket exposure that leave web perimeters vulnerable under OWASP guidelines.
I engineered this platform using Next.js (App Router), TypeScript, and Node.js network sockets, solving core security and networking challenges:
🔒 Strict Anti-SSRF Defense: Deterministic filtering of RFC 1918 private ranges and loopback interfaces to prevent backend proxy misuse.
âš¡ Socket Timeouts & Redirect Handling: Enforcing manual redirect inspection and AbortSignal timeouts to prevent process blocking from hanging ports.
📋 OWASP Header Validation & Forensic Reports: Automated assessment of HSTS, CSP, and framing policies, exporting clean, print-ready A4 forensic PDF reports.
🤖 Automated Remediation Engine: Immediate deployment of mitigation snippets (Nginx, Apache, Cloudflare) with local deterministic fallback logic.
🔗 Live Demo: https://security-score-seven.vercel.app
📂 GitHub Repo: https://github.com/martincastillo1996/security-score
Currently open to technical discussions, security posture consulting, and opportunities in L3 Support, Cloud Infrastructure, and Full-Stack Engineering. Feedback is appreciated!
Top comments (0)