Loading
Xavier Boone

Practice — Security

Security portfolio

Authorized assessments and hardening work. Client names are withheld or generalized where the engagement terms require it; scope and findings are described at a level agreed with each client.

Write-ups in preparation

Engagement summaries are published only with written client consent, so this section fills in as approvals come through. If you need references before then, ask me directly and I will arrange them.

Tools and projects

Published work

Security Hub — home security posture advisor

2026

Most households choose security software on price alone, because the alternative is reading marketing copy across a dozen vendor sites and still not knowing what renews at triple the intro rate. Meanwhile the protection people already pay for — bundled into a carrier plan, an ISP router, or a credit card — goes unused, and the same coverage gets bought a second time. Very few people give any of this attention until a fraud alert forces the issue, and by then a household is already absorbing the cost of an identity theft it could have made significantly less likely.

This tool does that reading on the household’s behalf. It takes device counts, adult and child seats, carrier, router capability, and a monthly budget, then returns a right-sized plan built on coverage the household already has, priced at both the intro and the renewal rate. The current release extends past price into governance: where each parent company is incorporated, what that jurisdiction can legally compel it to disclose, and whether the country participates in an intelligence-sharing alliance. Build and stack details are on the web design page.

Build guides

Things you can build yourself

Step-by-step builds I have actually run, written so someone can repeat them. Grouped by platform, so a series stays together as it grows.

pfSense

1 entry

A cost-first alternative to buying a Netgate appliance: pfSense on a two-port mini PC, for roughly what a Netgate 1100 costs but with an x86 CPU and 8 GB of RAM behind it. Full parts list with prices, the install and interface assignment, the first-login changes that matter, and the two kernel panics I hit — an Intel 7265 firmware fault and the 2.9.0 acpi_spmc erratum — with the fixes that held.

Published
20 September 2026
Platform
pfSense · part 1 of the series
Covers
Hardware selection, install media, interface assignment, default rule posture, troubleshooting
Length
8 min read
Read
Implementing a pfSense Firewall

Skills and credentials

What I work with

Assessment

  • OSINT and digital footprint analysis
  • Network and host vulnerability scanning
  • Social engineering, where authorized

Hardening and defense

  • Cloud posture review (Azure)
  • CIS Benchmark configuration work
  • Logging, SIEM, and detection rules
  • Identity and access management

Credentials

See certifications for verified credentials and verification links.

Contact

Scoping an assessment?

Useful to include: what the system is, roughly how big it is, whether it's production or staging, and who in your organization can authorize testing.