Phishable is a project that logs misconfigured DNS that can be exploited to conduct phishing attacks & spoof domains. Phishable helps orgs investigate phishing campaigns, gauge third-party risk & mitigate these risks. All orgs on the list are exposed to higher risk of threat actors gaining initial entry to their org, supply chain, and customers.

Simple CLI script to assist GRC analysts with risk ranking vendors.

Enterprise AI Third Party Risk Management Platform with 100+ API endpoints, 4 AI Agents, 12 Compliance Frameworks including SOC 2, NIST, ISO 27001, DORA and SIG. Reduces vendor assessment time from 8 hours to 15 minutes.

Conducted a proactive DPIA for a Nigerian fintech, identifying high-risk gaps in cross-border transfers and consent management.

Transforming vendor risk management post-breach: from failed checklists to evidence-based assurance.

Vendor-agnostic pattern for automating vendor risk governance and translating reassessment cadence into executive oversight.

A comprehensive third-party risk management framework for a global media streaming platform. Focuses on vendor classification, content security, intellectual property protection, and compliance monitoring, delivering risk maps, due diligence checklists, and strategic recommendations

Professional Governance, Risk & Compliance Portfolio

Enterprise GRC lab for a fictional financial services company, aligned to NIST CSF and ISO 27001.

Minimum-viable vendor risk intake workflow + evidence pack

Risk-based third-party cybersecurity risk management (GRC-focused)

Practical playbook for Third-Party Risk Management in healthcare environments.

A structured framework for assessing third-party vendor risk, with model contract clauses.

Scenario‑based cyber risk analyses demonstrating how privileged account abuse and third‑party vendor breaches escalate into business impact. Uses NIST‑aligned methods, threat pathways, and quantitative scoring to support clear, executive‑level risk decisions.

Full Splunk App for Bitsight Security Ratings. Monitor and visualize security ratings, portfolio companies, alerts, findings, exposed credentials, users, and threat intelligence from the Bitsight API.

🔒 Conduct a compliant DPIA for GETMONI's digital lending platform to identify and reduce privacy risks in credit data processing.