Slimming down vulnerability intake
Signal triage and service ownership matter more than queue length alone.
Security engineering / audit / controls
Justin Sleight
I work across security engineering, IT audit, and resilient systems. This version of the site is intentionally simpler: a quieter index of what I write, what I build, and how to reach me.
Notes
Selected writing
Instrumenting audit trails without slowing teams
Guardrails for privileged workflows in hybrid environments.
Baseline hardening for remote-first orgs
Practical controls that stay compatible with fast-moving device fleets.
Shipping compliance evidence continuously
Audit artifacts as code through pipelines, policy, and reproducible builds.
Projects
Code and experiments
PassStrength
A Textual TUI for checking password strength by length, entropy, and character pool.
Traceback CLI
Terminal tooling for access reviews, identity pivots, and incident-ready audit exports.
Safeguard Sync
Least-privilege policy automation for Windows shared directories.