01
SOC & Detection
0%Alert triage, log correlation, IoC hunting, and incident documentation across hosting and WordPress fleets.
04.
Skills
Five operational domains — proficiency reflects production scope, not self-assessment alone.
02
Web Application Security
0%WordPress hardening, WAF tuning, plugin/RCE class triage, and practical mitigation under production constraints.
03
Linux Systems Administration
0%Fleet operations on Linux hosts: patching, service isolation, backup integrity, and recovery under pressure.
04
Network & Perimeter
0%ACL design, rate-limiting, abuse response, and traffic anomaly review at the hosting edge.
05
Forensics & Hardening
0%Artifact preservation, attack-chain reconstruction, CIS-minded baselines, and post-incident hardening.
05.
Under the hood
Real tools and technologies in day-to-day work.
LinuxcPanel/WHMWordPressWAFModSecurityImunify360systemdBash/PythonNVD/CVE feedsTelegram alerts
06.
Security posture
Hand-rolled hardening — verifiable.
- XML-RPC disabled
- Security headers (CSP, HSTS, X-Frame-Options)
- REST user enumeration blocked
- WP version fingerprint removed
- SVG uploads blocked
- Generic login errors
- File editor disabled
Verify live grade