A short list of side projects. Starting with the newest one.
A locally-hosted tool that signs into Microsoft Entra ID, reads your Conditional Access policies via Microsoft Graph, scores them against security best practice, and explains what to fix. A React/TypeScript dashboard shows a 0–100 score, a severity-sorted findings list with remediation steps, and a visual policy flow (Users → Conditions → Apps → Controls) for every policy. Everything runs on your own machine — nothing is sent off-box. Sign in with a device code by default, or an optional app-only client-credentials flow. CI builds and tests the app on every change.