Case studies
Building an enterprise AI security program from zero
Enterprise AI adoption arrives team by team. I own the program that makes it safe at MasterControl — the gateway, the guardrails, the policy, and the training that makes people actually follow it.
One sanctioned path for enterprise LLM traffic, built to be inspected — and the governance to keep it that way.
Read the case study →Detecting prompt injection, data leakage, and shadow AI
Three threat classes that do not look like anything in a traditional SIEM. Building coverage means deciding what an attack even looks like when the payload is ordinary English.
A threat model and coverage design for three AI threat classes that conventional detection does not see.
Read the case study →Embedding security into the delivery pipeline
Security review that happens after the code is written is advice. Moving the checks into the pipeline — static analysis at the merge, signature verification at the cluster — turns them into constraints.
Findings move to the merge; image integrity is enforced at the cluster boundary rather than audited after it.
Read the case study →Turning cloud findings into work someone owns
A finding in a dashboard is not a finding anyone is accountable for. Three pieces of automation that attribute cloud resources at creation, convert policy violations into tracked tickets, and keep the scanner and the issue tracker telling the same story.
Cloud security signals arrive as assigned work with a deadline, instead of as a dashboard someone has to remember to read.
Read the case study →Smaller things I've built and broken
Side projects and practice, kept deliberately below the main work.
Pipeline Security Automation with Semgrep
GitHub Action automating static analysis with custom Semgrep rules, with a gating mechanism that blocks merges on detected vulnerabilities.
Semgrep · GitHub Actions · SAST
Secrets Detection Tool
Python tool that identifies exposed credentials across large codebases, simulating attacker reconnaissance. Live API validation filters expired tokens to keep detection precision high.
Python · API validation · Recon
TryHackMe
Staying sharp offensive-side through CTF challenges and hands-on labs.
tryhackme.com/p/drumin ↗