Tools I ship in the open.
Kubernetes security, server hardening, backups and Russian-market DevSecOps compliance — the same problems I solve for clients, released as code you can read and run. 51 public repositories and counting.
Kubernetes & Cloud Security
Kube-Simple-Audit
Fast sanity-check script for Kubernetes clusters — surface misconfig before it bites.
Secure-K3s-GitOps-Template
Production-ready K3s baseline wired for GitOps — secure defaults from day one.
KubeGuardian-Core
Kubernetes runtime security engine — the enforcement core.
Cloud-IAM-Optimizer
AWS / GCP IAM auditor — find over-broad permissions and tighten them.
Hardening & Backups
AutoHarden-Toolkit
CIS-Benchmark server hardening, automated.
linux-hardening-blueprint
Pragmatic Linux hardening blueprint for small business.
secure-backups-drill-lab
Hands-on lab for practising backup security — because untested backups aren't backups.
gost-backup-vault
Backup encryption with GOST crypto support.
RU DevSecOps & Compliance
152fz-compliance-as-code
152-ФЗ personal-data compliance, expressed as code.
ru-smb-pd-anonymizer
Personal-data anonymization for Russian SMBs.
kii-readiness-mapper
Map infrastructure readiness against КИИ requirements.
roskomnadzor-impact-simulator
Model the impact of network-blocking on your services before it happens.
Observability & Incident
incident-timeline-extractor
Reconstruct clean incident timelines from noisy logs.
onec-bitrix-observability-pack
Monitoring pack for 1С / Bitrix stacks.