Exploring DevSecOps, Cloud Engineering, and Modern Web Development
This project represents my commitment to continuous learning and professional growth. Through hands-on experience with cutting-edge technologies, I've built a comprehensive understanding of modern software development practices.
AI-Powered Movie Recommendation System
Built an intelligent movie recommendation system using machine learning algorithms and modern web technologies. The system learns from user preferences and viewing history to provide increasingly accurate movie suggestions.
Advanced recommendation algorithms that adapt to user preferences
Responsive system that updates recommendations instantly
Clean, intuitive interface with smooth animations
Experience the AI-powered movie recommendation system in action:
🎬 Explore Plex RecommendationsCross-framework controls on a dedicated subdomain
A static, client-side explorer for frameworks such as NIST SP 800-53, GDPR, NIS2, ISO/IEC 27001, and SOC 2—canonical controls, framework-specific identifiers, domains, and explicit mappings for gap analysis.
Strict CSP on a subdomain means every stylesheet, script, and image must either come from that host or be deliberately allowlisted—cross-origin shortcuts fail closed.
A small sync script copies shared CSS and shell assets into compliance/_bundle/ so the app stays self-contained under one origin.
JSON exports live next to the app; the client loads them with fetch, which keeps operations simple for static hosting.
Navigator-style heatmap + enriched threat actor data
A dedicated subdomain for MITRE ATT&CK Enterprise, CISA KEV, and cross-links to NIST 800-53 controls on the compliance mapper—built as a static hash-router SPA with a FastAPI backend on k3s.
Added GET /heatmap/data so the UI loads every tactic, technique, group count, and KEV count in a single request instead of hundreds of detail fetches.
Seeded group_metadata (country, motivation, sponsor type, sectors) and exposed filters plus country-level stats in the API and frontend.
S3 + CloudFront static site, bundle sync for CSP, Terraform module for DNS alias to CloudFront, and SQLite served read-only from the threat API pod.
Technique detail pages link to mapped NIST controls; the compliance mapper now deep-links ATT&CK technique IDs on compliance.robertconsulting.net so defenders can move between frameworks and threat intelligence in one click.
Real infrastructure managed with Terraform
Loading...
Uses timestamp-based versioning (YYYYMMDDHHMMSS) for frequent content updates. Each deployment gets a unique version number that reflects when it was created.
v20251120113439VERSION and website/version.jsonUses semantic versioning (MAJOR.MINOR.PATCH) for infrastructure changes. Only incremented when infrastructure code or configuration changes.
1.1.3