privileged-access

Lightweight, self-hosted Entra ID governance portal: track app/identity ownership, surface credential and access risk, and score tenant health — running in your own Azure subscription.

10 hands-on Microsoft Cybersecurity Architect SC-100 labs covering Zero Trust, MCRA, MCSB, ransomware resilience, SIEM, XDR, SOAR, Entra ID, privileged access, Purview, Defender for Cloud, Azure Policy, hybrid and multicloud posture, infrastructure, application, data, AI, and Microsoft 365 security architecture.

Transforms IAM exports into a human-readable identity risk narrative with executive summaries and engineer-focused findings.

Self-hosted open-source credential manager for teams. Share company accounts without exposing passwords. Chrome extension auto-login. One-click offboarding.

PowerShell-first Active Directory security posture auditor for privileged access, Kerberos, Windows LAPS, Group Policy, ACLs, and offline drift analysis.

Synthetic database activity monitoring and SQL threat detection portfolio covering privileged DBA activity, sensitive table access, suspicious query patterns, alert triage, dashboards, and control mapping.

local proof-of-concept implementing the Sovereign Intent Framework - a runtime governance architecture for agentic AI. Tests deterministic policy enforcement, intent manifest hashing, and audit trail generation against seeded adversarial scenarios.

CyberArk session-risk console for privilege drift, checkout posture, high-risk access paths, and evidence-ready remediation routing.

Omni-SAG — auditable Linux privileged-access gateway (SSH + SFTP): AD+MFA, single-dialer authz, tamper-evident evidence chain, recording, ICAP inspection, CyberArk injection, four-eyes approvals, control-plane API/TUI. Go modular monolith.

Okta is the workforce identity incumbent — its Identity Cloud platform (also called the Okta Workforce Identity Platform) covers Single Sign-On, Adaptive MFA, Universal Directory, Lifecycle Management, Identity Governance, Privileged Access, Device Access, Identity Threat Protection, Identity Security Posture Management, Access Gateway, and API…

Dedicated Kinetic Gain proof repo for CyberArk platform and company signal coverage. Synthetic board-ready evidence, CLI summary, static report, and CI gate.

Certificate-authenticated privileged access to BIG-IP management, composed from OpenBao, OpenLDAP and BIG-IP APM. The operator never sees the password, sessions can be terminated instantly, and no custom code sits in the credential path.

Free CyberArk practice questions 2026 — 861 questions across 10 exams | certbase.pro

Operator control plane for Microsoft Entra access reviews, privileged-role decisions, stale approvals, and identity-governance remediation posture.

Secure Keyboard Solution for managing cloud assets using Intune and Entra ID

Zero-standing-access AWS break glass system using Entra PIM, Azure Automation, Power Automate and Microsoft Graph API

BeyondTrust is a cybersecurity company specializing in privileged access management (PAM) and vulnerability management solutions. Their products help organizations prevent data breaches, malware attacks, and insider threats by identifying and controlling the access of privileged users, accounts, and credentials across the enterprise.

Privileged change briefing for CyberArk access risk and FirstUp workforce communication evidence.

Unofficial Docker images for Okta Privileged Access (OPA) ScaleFT client and gateway packages, built from Debian slim and published to GHCR for labs and automation.