Skip to content
View joeseverino's full-sized avatar
0 followers · 2 following

Achievements

Achievement: Pull Shark

Achievements

Achievement: Pull Shark

Highlights

Block or report joeseverino

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
joeseverino/README.md

Joe Severino

Cybersecurity graduate student at Georgia Tech focused on network security, security engineering, and the production tooling that keeps secure systems maintainable.

Certifications: CCNA, CompTIA Security+, ISC2 Certified in Cybersecurity (CC)

Most of my projects are built around real systems I run myself: WordPress hardening, TLS automation, private PKI, DNS filtering, local AI tooling with safety boundaries, and homelab infrastructure.

Featured Projects

  • severino-vault-mcp - Local-first MCP server that gives AI assistants safe access to an Obsidian operations vault. Layered CI security tooling (CodeQL, pip-audit, OSSF Scorecard, Dependabot), documented threat model, and a four-tier sensitivity gate for credential-adjacent content.
  • branding-engine - Published npm package that generates favicons, vector marks, wordmarks, social cards, brand sheets, and web tokens from one color and monogram. It is the single-source brand renderer behind jseverino.com, with real font-outline rendering and provenance-attested GitHub releases.
  • sitedrift - Published npm package for reviewing DEV against LIVE on the same route. It provides Split, Solo, Overlay/Diff, synchronized navigation, response deltas, SEO checks, browser-local notes, an MCP interface for AI collaborators, and a two-step Cloudflare Pages preview addon that leaves production unchanged.
  • jseverino.com - Public Astro portfolio deployed on Cloudflare Pages from a private Obsidian vault. It uses branding-engine as its generated brand source and sitedrift on branch previews, alongside vault-to-content sync, static publishing checks, CSP hardening, and a D1-backed contact form protected by Turnstile.
  • severino-labs-security-layer - Custom WordPress security plugin for application hardening, file integrity monitoring, security event logging, browser security headers, and passkey-first login customization.
  • tools - Personal macOS CLI suite: age-based file encryption with Keychain-cached unlock, vault sync, dotfile backup, DNS latency diagnostics, and a bridge between an Obsidian vault and a private Django docs index.
  • zsh-git-deploy-workflow - Zero-dependency Git deploy pipeline for solo devs. One bootstrap command wires SSH keys, GitHub integration, and per-project shell commands. acmepush "fix: message" stages, commits, pushes, and deploys without CI, YAML, or dashboards.

Focus Areas

  • Network security
  • Infrastructure automation
  • Open-source developer tooling
  • Deployment preview and visual review workflows
  • Static site publishing
  • WordPress hardening
  • TLS and PKI
  • DNS filtering
  • Local-first AI tooling with explicit safety boundaries
  • Secure deployment workflows
  • Homelab engineering

Links

Pinned Loading

  1. severino-vault-mcp severino-vault-mcp Public

    Local-first MCP server for safely querying Git-backed Obsidian runbooks and operations inventories with AI tools.

    Python

  2. jseverino.com jseverino.com Public

    Personal cybersecurity portfolio at jseverino.com, built with Astro and published to Cloudflare Pages from a private notes vault.

    JavaScript

  3. branding-engine branding-engine Public

    Generate a complete brand system — favicons, vector marks, wordmarks, social cards, brand sheets, and web tokens — from one color and monogram.

    JavaScript

  4. sitedrift sitedrift Public

    Visual review for local and Cloudflare preview deployments — compare DEV and LIVE with Split, Overlay/Diff, SEO, response deltas, notes, and MCP.

    JavaScript 1

  5. severino-labs-security-layer severino-labs-security-layer Public

    Custom WordPress security layer for application hardening, file integrity monitoring, security event logging, and passkey-first login customization.

    PHP

  6. tools tools Public

    Personal CLI tools for macOS: age-based file crypt with Keychain-cached unlock, vault sync, dotfile backup, DNS latency diagnostics, and a one-command bridge between an Obsidian vault and a private…

    Shell