Projects

Products, client builds, and security work I can talk about.

2025 – now · product

ZWB.SH

Security tooling studio. Pull-request review, CI audits, supply-chain reports and sandboxing for coding agents.

security
astro
cloudflare
ai

2018 – now · client

ZWB Consulting

Software development and security services, from multinationals to small businesses. Audits, penetration testing and custom builds.

consulting
pentesting
full-stack

2020 · security

Bureau of Meteorology disclosure

Found a boolean-based blind SQL injection on bom.gov.au that exposed server data and indirect paths toward remote code execution. Reported through responsible disclosure.

sqli
responsible-disclosure
web

2020 · client

jamespeters.co.nz

Art-selling website with a custom admin panel backend and dynamic listings served from MongoDB.

node
mongodb
e-commerce