My work sits at the intersection of Application security, Cloud security, and Intelligent automation, driving resilience across complex enterprise environments.
Application Security & Remediation Platform
I built KovaScan to bring code, dependency, infrastructure, and web scan results into one place. It removes duplicate findings and helps teams decide what to fix first.
Findings stay tied to owners, deadlines, and the services they affect. Teams can trace attack paths and review suggested patches, with a person approving what ships.
Dependency Vulnerability Scanner with Visual Intelligence
This tool transforms how developers interact with security audit results by making vulnerability data immediately actionable and easy to understand. Instead of parsing through raw JSON or plain text output from npm audit, pip-audit, or bundler-audit, it automatically detects your package manager and presents findings through color-coded dashboards, severity bar charts, and detailed tables with direct CVE links.
It intelligently normalizes output across different package managers (npm, yarn, pnpm, pip, bundler) into a unified format, making it easy to understand vulnerabilities regardless of your tech stack. By filtering by severity, highlighting direct vs transitive dependencies, and providing auto-fix command suggestions, it cuts through the noise to show what actually needs attention.