Each of my open source security and AI tools has a copy at github.com/nexaforge-oss, which is where sponsorship for them will be collected. I keep working on the tools here under my own name, and the copies are kept in step with them.
| Tool | What it does |
|---|---|
| wazuh-ruleguard | Regression tests for Wazuh detection rules |
| wazuh-noiselens | Preview what a Wazuh suppression would hide |
| hexswarm | Scope gated AI agent swarm for authorized pentesting |
| no-api-media-mcp | Image and video generation with subscriptions you already have |
| urdu-tts-pronunciation | Correct Urdu pronunciation for AI voices |
sfa-monitor, a free desktop widget for Linux (free to use, not open source), stays under my own name only.
Build. Break. Defend. Govern. That is how I think about cyber security.
I'm a cyber security engineer and head of cyber security based in Karachi, Pakistan, with 15 years in IT and the last nine in security. I lead a team that covers offensive testing, detection and response, forensics, DevSecOps and governance, risk and compliance (GRC), and I stay hands on in the engineering, the investigations and the detections that catch the next attempt.
- Build. Security engineering and DevSecOps: secure design, hardening, and detection engineering with Wazuh mapped to MITRE ATT&CK.
- Break. Leading web, mobile and network penetration testing, vulnerability assessment and red team work.
- Defend. SOC operations, incident response, mobile and Windows forensics, evidence handling and threat hunting.
- Govern. ISO/IEC 27001, security policy, risk assessment and audit readiness, and building and leading the team that does all of it.
Certifications: PNPT, CEH, eJPT, CHFI, CISM, CISA, CSA (Certified SOC Analyst) and ISO/IEC 27001 Information Security Associate. The portfolio lists all of them with their issuers.
Hiring? I'm open to conversations about cyber security leadership and senior engineering roles. Write to nexaforge.services@gmail.com or message me on LinkedIn.
Recognition: acknowledged for responsible vulnerability reports by HackerOne (ranked #7 in Pakistan), OPPO, AT&T, Mastercard, Rockstar Games and other companies.
A free desktop performance widget and task manager for Linux. It shows CPU, memory, disk, network and GPU use right on the desktop, and opens a full monitor with End Task, history, services, containers and logs in one click. One signed installer works on Kali, Debian, Ubuntu, Rocky Linux, AlmaLinux and RHEL, and updates are signature checked. Free for home and work use. Download the latest release.
A rule exception can silence the sample you tested and still affect detections you need. RuleGuard checks a JSON suite of sample logs against the Wazuh 4.x logtest API, compares runs before and after a rule change or upgrade, lints rule files for rules that load but never match, and shows which ATT&CK techniques your tests cover. Reports come as JSON, JUnit XML, Markdown and a readable offline HTML page.
Before you suppress a busy rule, find out which alerts the exception would hide. NoiseLens reads exported Wazuh alerts offline, counts matches for a proposed exception, and flags any match against alerts you have protected. It also shows where the volume comes from (rule groups, directories, how many incidents the alerts really are) so you can build a narrow exception from your own data.
Both are early prototypes in Python with no runtime dependencies, with releases and Docker images on GitHub. The examples use synthetic data, and live validation on real Wazuh managers is the biggest thing still missing, so a compatibility report is the most useful help you can give. Both are independent projects and are not affiliated with Wazuh Inc.
An MCP server that lets Claude Code, Cursor and Codex make images and videos through the ChatGPT, Google AI Pro and Higgsfield accounts you already pay for, with no API keys. You sign in once yourself and it never sees your password. It reads your project first so the pictures match the site, saves them inside the project, and can cut out backgrounds, edit video and export every social size locally. It is Apache-2.0 licensed, and the README says plainly where the providers' terms limit automated use.
You are welcome to review, demo, teach or write about me and my projects, on YouTube, a blog, a newsletter, a podcast or social media. You do not need to ask first, and monetised content is fine. PRESS.md lists exactly what you can do, including using my photo and logos, plus a few simple things I ask in return.
These tools are free, and keeping them tested on real systems takes machines, hosting and time. If you run a hosting or cloud company, make security tools, or just find the projects useful, there are simple ways to help: hosting and CI credits, tools and licences, or direct funding. GitHub Sponsors is not available in Pakistan, so funding is collected through Open Collective at NexaForge OSS, with a card and any amount. The sponsor page has the other ways to help.
Contributions are welcome, and a real-world test result is worth more than a code change. Start with a good first issue, or open a discussion. Please never post credentials, hostnames or organization logs in public issues.
I also run NexaForge, a small studio for cyber security and vibe coding, with web development and IT infrastructure alongside. nexaforge.eu.cc · nexaforge.services@gmail.com