Projects
A selection of my work and side projects that I’ve open-sourced or shared publicly.
Security projects
Application security, offensive tooling, and security product engineering.
SecurityLeaflet
Pentest notes and engagement workspace with host tracking, findings, CVSS, credentials, and attack-chain documentation.
SecurityTeXploit
Local-first pentest report workspace for writing LaTeX or Markdown reports, managing findings, templates, and PDF compilation.
SecurityPhisher
ML-based phishing detection system with a browser extension, FastAPI backend, research workflow, and IEEE ICAC 2025 paper.
SecurityPentestPortal
Pentest reporting and security assessment platform for findings management, report generation, and remediation workflow.
Other projects
Agent orchestration, developer tools, applications, and experiments.
Agent Arche
Codex skills harness with reusable engineering workflows, optional safety hooks, and obsidian memory.
Personal Terminal
Interactive SSH portfolio built with Go and Charm libraries. Connect via terminal to explore projects, experience, and skills.
Personal Blog
Personal blog where I share cybersecurity write-ups, development lessons, and practical guides from real projects.
Freelance Website
Client-facing freelance website for web development, secure product engineering, selected work, and project enquiries.
UpTime
Predictive maintenance system for diesel generators using IoT technology.
NScholar
Academic platform for NSBM students to share research, collaborate, calculate degree classifications, and get guidance.
BookKing
Multi-service booking platforms offer a one-stop solution for consumers to book a wide range of services.
Waypoint
To be released
Freelance work
Websites and applications delivered for freelance clients.
Client workSkin Doctor
Bilingual portfolio and patient information website for a specialist dermatologist based in Sri Lanka.
Client workSmart Caps
Responsive product and company website for a Sri Lankan manufacturer of aluminium ROPP closures.
Client workXentrika
Corporate and lead-generation website for a Sri Lankan cybersecurity and penetration-testing company.
Client workXentrika Blog
Technical publishing platform for cybersecurity research, vulnerability analysis, and penetration-testing insights.
Client workAccessArche
Corporate portfolio website for a Sri Lankan venture studio building and scaling technology-focused companies.
Client workInstaPrint
Smart self-service printing kiosk platform with mobile document submission, QR collection, and hardware integration.
Client workOtomate
Business website for a Sri Lankan automation company building practical digital tools for local operations.
Client workOrderMate
Multi-tenant QR ordering and restaurant operations platform for cafes, restaurants, and food courts.
Client workTropico
Freelancing e-commerce showcase web app for a dry food company based in Sri Lanka.
DAS Transport
To be released