Security & web

I make the safe path the easy path.

I'm maciv, a security professional and a web developer on the side. I build pragmatic security programmes, and websites with more character than they strictly need.

Focus
Endpoint security · Detection · GRC · AI governance
Approach
Practical controls people actually adopt
On the side
Websites built with Astro

Selected work

Websites with a bit of mischief built in.

What I do

Security by day, websites by night.

The two feed each other. Building things makes me a more practical security person, and a security mindset makes for calmer, sturdier websites.

Security engineering

Security programmes designed, built and run end to end: endpoint hardening, MDM and EDR, detection engineering with custom detections, and incident investigation and response.

  • Endpoint & macOS
  • Detection engineering
  • Vulnerability management

Governance, risk & privacy

I turn regulation, policy and risk into controls that are practical to execute. GDPR and supplier oversight, and governance for AI coding agents: guardrails, sandboxing and telemetry.

  • GDPR / GRC
  • AI governance
  • Supply-chain security

Web development

I build fast, static-first websites with Astro that editors can run themselves, usually with something hidden in them. Security habits come along for free: small attack surface, no trackers, server-side secrets.

  • Astro
  • TypeScript
  • Headless CMS

Have a security question, or a website that needs a secret?