A short list of side projects. Starting with the newest one.
A locally-hosted tool that signs into Microsoft Entra ID, reads your Conditional Access policies via Microsoft Graph, scores them against security best practice, and explains what to fix. A React/TypeScript dashboard shows a 0–100 score from a thirteen-rule, data-driven rule set (legacy auth, admin/all-user MFA, device compliance, sign-in/user risk, session controls, admin sign-in frequency, Terms of Use, and more), a severity-sorted findings list with remediation steps, and a visual policy flow (Users → Conditions → Apps → Controls) for every policy. Everything runs on your own machine — nothing is sent off-box. Sign in with a device code by default, or an optional app-only client-credentials flow.
Sign-in and Graph fetch are unit-tested against mocked transports; a live sign-in against a real Entra tenant hasn't been exercised yet.