Projects
AI systems, RAG pipelines, and full-stack products I've built along the way.
A reverse-proxy WAF combining sliding-window rate limiting with transformer-based request inspection, benchmarked against ModSecurity with OWASP CRS v4 on 675 labeled real-world payloads for a 96% detection rate vs. 46%. Fine-tuned DistilBERT to detect 10 web attack classes - Path Traversal, SQLi, XSS, SSRF, and IDOR - at 97.5% accuracy, with OWASP Juice Shop, WebGoat, and DVWA deployed behind a Docker Compose reverse-proxy gateway enforcing per-IP rate limiting and monitor, block, and challenge modes before reaching the origin.
