Decoding threats.
Engineering defenses.

I operate as a fully independent security researcher, threat investigator, and systems developer. I don't run an agency, and I don't employ staff - when you work with me, you get direct, unfiltered access to my technical expertise and deep telemetry.

My professional practice is strictly contract-based. I collaborate as an external expert with high-impact platforms, serving as a Security Researcher for ADAMnetworks to analyze threat telemetry and investigate malware behavior, and for domainintelligence.uk on DNS reputation mapping and telemetry tracking. Additionally, I partner with Nerds On Site to secure, architect, and manage corporate IT environments and commercial networks.

In my independent labs, I design and run original threat-hunting platforms and security systems. This includes Derp.ca (my public daily malware command-and-control tracker), RogueBinary.com (my advanced threat hunting and automated malware analysis laboratory), my YARA Rules repository, and my suite of custom open-source Model Context Protocol (MCP) servers for Ghidra, Radare2, and ILSpy.

Separately, I run YLX.ca, a high-performance technical SEO venture. This represents a completely distinct area of focus where I apply similar systems-engineering discipline - analyzing raw crawl logs, optimizing server rendering paths, and engineering scale-resilient organic discovery pipelines.

Across both disciplines, I am completely hands-on. Whether I am dissecting an active botnet loader or profiling a search crawler's behavior, there is no consulting theater or management overhead. I write the pipelines, analyze the data, and execute the work directly.