What Good Security Logging Looks Like
An exploration of what fields matter most during an incident and how to standardize logs across microservices.
Read Write-up
ETHICAL HACKER · SECURITY RESEARCHER
I find weaknesses before they become incidents.
Security researcher focused on web security, cloud environments, threat analysis, and practical defensive improvements.
identity.yml
name: Nullshade
role: Security Researcher
location: Southeast Asia
focus: [Web, Cloud, AppSec]
status: Open to selected projects
role: Security Researcher
location: Southeast Asia
focus: [Web, Cloud, AppSec]
status: Open to selected projects
auth_check.py
# Verify token integrity
def validate_session(req):
token = req.headers.get('Authorization')
if not token:
return False
def validate_session(req):
token = req.headers.get('Authorization')
if not token:
return False
bash - 80x24
Focus
Web Security
Current
Cloud Security Research
CTFs
42 Completed
Reports
18 Responsible Disclosures
Curious by nature. Defensive by principle.
I am a security researcher who studies how systems fail, testing applications responsibly to help teams reduce real-world risk. My approach is grounded in the belief that effective security requires deep technical understanding combined with clear, actionable communication.
Whether I'm analyzing complex authentication flows, reviewing cloud IAM configurations, or hunting for logic flaws in web applications, I focus on documenting findings clearly and providing pragmatic remediation advice.
I value responsible disclosure, continuous learning, and building robust defensive controls.
sys_metrics
Uptime: Active
Specialty: AppSec, Threat Analysis
Approach: Assume Breach, Defense in Depth
Objective: Minimize Attack Surface
Security Capabilities
Technical focus areas and defensive competencies.
Web Security
- Authentication Review
- Authorization Testing
- Session Security
- Input Validation
- Security Headers
- API Security
Cloud Security
- IAM Review
- Configuration Assessment
- Exposure Review
- Logging & Monitoring
- Least Privilege
Infrastructure
- Linux
- Docker
- Networking
- Web Servers
- TLS
- Reverse Proxies
Defensive Analysis
- Log Analysis
- Threat Modeling
- Incident Triage
- Vulnerability Management
- Security Hardening
TOOLKIT:
Burp Suite
Wireshark
Nmap
Linux
Docker
Git
OWASP ZAP
SIEM
Featured Security Projects
Practical tools, environments, and visualizations.
monitoring_dash.svg
Defensive Tools
Sentinel View
Security monitoring dashboard for reviewing alerts and asset status across environments.
HTML/CSSJSVisualization
auth_demo.svg
Web Security / Labs
AuthGuard Lab
Demo application exploring secure authentication and authorization patterns, highlighting common pitfalls.
PythonJWTOAuth
log_lens.svg
Defensive Tools
LogLens
Frontend visualization for analyzing fictional security events and identifying anomaly patterns.
Vanilla JSD3.js
cloud_posture.svg
Cloud
CloudCheck
Cloud security checklist and posture-review interface for rapidly auditing IAM configurations.
Audit ToolsSecurity Config
headers_scan.svg
Web Security
HeaderScan UI
Educational interface showing recommended web security headers and explaining their defensive benefits.
HTTP HeadersCSP
incident_time.svg
Research
Incident Timeline
Interactive visualization for documenting incident-response steps and tracking lateral movement patterns.
ForensicsVisualization
Security Labs
Safe local environments used for learning and testing defensive concepts.
Broken Auth Lab
Focus: Authentication mistakes and secure remediation strategies.
Access Control Lab
Focus: Understanding authorization logic and implementing robust defensive fixes.
API Security Lab
Focus: Secure API design, rate limiting, and strict input validation.
Logging Lab
Focus: How useful logging improves incident detection and speeds up triage.
CTF & Challenges
Fictional achievements demonstrating technical problem-solving.
42
Total Solved
12
Web
9
Forensics
8
Crypto
7
OSINT
Web Fortress
SOLVEDHidden Signal
SOLVEDCipher Trail
SOLVEDOpen Source Hunt
SOLVEDExperience
2025 — Present
Security Researcher
Fictional SecOps Inc.
- Review application security
- Document vulnerabilities
- Support remediation
- Perform threat modeling
- Improve defensive controls
2023 — 2025
Junior Security Analyst
Defiant Networks
- Analyze alerts
- Review logs
- Support incident investigations
- Track remediation
2021 — 2023
Systems / Web Developer
TechBuild Studio
- Build web applications
- Maintain Linux environments
- Improve application security
Certifications
Security+
View Credential →eJPT-Style Fundamentals
View Credential →Cloud Security Fundamentals
View Credential →Incident Response Basics
View Credential →Responsible Disclosure
Security research should improve systems, not harm them.
- Test only with explicit permission
- Minimize operational impact
- Protect sensitive user data
- Report clearly with replication steps
- Allow sufficient time for remediation
Research Notes
Articles on defensive engineering, architecture, and threat analysis.
Common Authentication Design Mistakes
Reviewing frequent architectural flaws in custom authentication flows and how to migrate to standard patterns.
Read Write-upWhy Least Privilege Matters in Cloud
A deep dive into IAM misconfigurations and how excessive permissions lead to unnecessary lateral movement.
Read Write-upBuilding a Better Incident Timeline
Methodologies for structuring logs and telemetry into a cohesive timeline during the first critical hours of triage.
Read Write-upDashboard
Current Research
Cloud Identity
Open Labs
3
Write-ups
12
CTF Score
4,820
Latest Activity
Reviewed authentication flows for Lab-02. Status: Secure.
"Clear findings, practical remediation advice, and strong communication throughout the review."
Interactive Interface
nullshade@portfolio:~
Welcome to Nullshade OS v1.0.0
Type "help" for a list of available commands.
Note: This is a safe, sandboxed simulation.
$
Let's talk security.
Available for selected security reviews and research collaborations.