IT Manager | Information Security Coordinator | Data Protection Coordinator | Certified Data Protection Officer
Building security tools and compliance platforms. Background in TISAX AL3 certification and NIS2 implementation. Working with SMEs in manufacturing, advertising agencies, and creative industries on security compliance and digital transformation.
🇩🇪 Munich, Bavaria · Available for EU compliance projects
🌈 I build a lot, ship a lot, and I do it in colored suits, because life is too short for grey.
| Project | Description |
|---|---|
| supply-chain-guard | Open-source supply chain security scanner for npm, PyPI, Cargo, Go, RubyGems, Composer, NuGet, Docker, VS Code extensions, GitHub Actions, IaC and Solana C2. Detects GlassWorm, Shai-Hulud and 350+ threat indicators. CycloneDX SBOMs, SLSA provenance grading, attack-chain correlation. GitHub Action |
| secure-dev-ai | Security guard CLI: blocks agent runs on critical findings, enforces secure AI-assisted development |
NIS2 assessments, ISO 27001 gap analyses, and workflow automation for SMEs, built with n8n, React, and Node.js.
| Area | Focus |
|---|---|
| NIS2 / ISO 27001 | Gap analysis, risk assessment, implementation roadmaps for SMEs |
| Workflow Automation | n8n-based compliance and reporting pipelines |
| Web Applications | Customer-facing compliance portals, Ghost CMS, React frontends |
| TISAX AL3 | Automotive supplier security certification experience |
| Project | Description |
|---|---|
| AAHP | Agent-Assisted Handoff Protocol: standardized context handoff between sequential AI agents |
| aahp-swarm | Role-based review and verification swarm extending AAHP: independent Scout, Tester, Risk, and Verdict agents review work before it ships. Model-agnostic, review-first. Why review comes first → |
| improvements | Portable multi-model AI workflow framework: model routing, structured agent handoff, and a 5-phase agent pipeline you drop into any repo |
| aahp-runner | Autonomous CLI: spawns Claude agents to work through project tasks |
| aahp-orchestrator | VS Code extension: orchestrate GitHub Copilot and Claude Code with AAHP context |
| aahp-cron | Pipeline orchestrator: schedules and runs aahp-runner across projects |
| aahp-hub | Web dashboard for the AAHP runner: live agent status, token usage, and task overview |
| List | Focus |
|---|---|
| awesome-software-supply-chain-security | A compilation of resources in the software supply chain security domain, with emphasis on open source |
| awesome-nodejs-security | Curated Node.js security resources: tooling, advisories, and hardening practices |
| Project | Description |
|---|---|
| BMAS | AI-assisted metric evaluation and experiment tracking |
🔧 Open Source @ Elvatis
| Tool | What it does |
|---|---|
| conduit-vscode | Multi-backend AI coding assistant for VS Code |
| conduit-bridge | OpenAI-compatible AI proxy: Grok, Claude, Gemini, ChatGPT via headless browser |
| elvatis-mcp | MCP server: expose smart home, memory, and automation tools to Claude Desktop, Cursor, Windsurf, and any MCP client |
Security and compliance from a practitioner's perspective: blog.elvatis.com