// cat ./projects/ctf-platform.md
CTF Training Platform
Practical Cybersecurity Training Lab
A CTF-based cybersecurity training platform focused on penetration testing scenarios, with vulnerability simulation and challenge deployment for internal awareness and red-team rehearsal.
## Goal
Move security training from slide decks to hands-on labs that mirror the attack patterns the team actually defends against.
## Design
Modular vulnerability scenarios, scoring, and isolated lab environments per participant. Challenges range from web exploitation to AD lateral movement.
## Infrastructure
The platform is defined in Terraform rather than assembled by hand — VPC networking and security groups, compute, a load balancer, ACM certificates and DNS records, deployed through a CI pipeline. Because the environment is disposable, a compromised or exhausted lab is rebuilt from source rather than repaired, which is the property that makes a deliberately vulnerable environment safe to run at all.
## Outcome
Hands-on labs replacing slide-deck training, and a challenge library the team can extend without rebuilding the environment each time.
// ls ../
FLAGSHIP
Snock →
Autonomous Cloud Security AI Agent
RESEARCH
SpecterHeal →
AI-Assisted Self-Healing Infrastructure
PRODUCTION
Enterprise DDoS Defense →
AWS Shield Advanced & Firewall Manager Automation
PRODUCTION
Hardened GitLab DevSecOps Platform →
Secure CI/CD with Terraform, tfsec, Trivy, SonarQube
ENGAGEMENT
Trend Micro XDR Remediation →
Enterprise Endpoint Detection & Response Tuning
PRODUCTION
AWS Incident Response Automation →
Event-Driven Containment with Lambda + CloudWatch
PRODUCTION
SOC Automation & Visualization →
TheHive + Elasticsearch + Grafana + n8n
PRODUCTION
Fortinet SD-WAN Deployment →
Resilient Multi-Site Connectivity
PRODUCTION
Cloud Monitoring & Observability Platform →
Terraform, ECS Fargate, cross-account CloudWatch
DELIVERED
CIS Benchmark & Remediation Program →
Measured posture improvement across a DevOps platform
DELIVERED
Open Banking Auth Flow Load Testing →
k6, mTLS, FAPI/OAuth2 with PAR, browser-driven SCA