Porto, Portugal

Daniel Malaco

Information Security Engineer

Designing and operating the security architecture for critical road infrastructure. In transport infrastructure, a network failure isn’t an inconvenience — it’s a stopped system and thousands of people stranded. Most of the work is private; what’s here demonstrates the practices behind it.

@ Ascendi · since 2020MSc · FEUP9+ years in networking & security
11 certifications verifiable on Credly
Certified CyberDefender L2Fortinet NSE 4-74 CTFs wonNIS2ISO 27001

Fortinet · Palo Alto Networks · Cloudflare · Splunk · Elastic · Entra ID · Active Directory · VMware · AWS · Azure · Kubernetes

// site stats
11
CI layers · build fails on any one
10
tools · 8 in-browser
9
headers verified in CI
5
decoy paths → MITRE ATT&CK correlation

Numbers read from the build — none picked to look good. Live status on This site →

Journey · networking & security across 5 countries

  1. 2017–18Doha MetroDoha, QatarIP networks & mobile WiFi (BBRS) · Thales/Altran
  2. 2017–18VLT SantosSantos, BrazilIP networks in light rail · Thales/Altran
  3. 2019–20Odense LetbaneOdense, DenmarkLight-metro networks & security · Efacec
  4. 2019–20Bergen D42Bergen, NorwayLight-metro networks & security · Efacec
  5. 2020–nowAscendiPorto, PortugalCritical road-infrastructure security

Projects

all projects →
This siteMonorepo with an Astro static site, markdown content, and client-side tools.HoneypotDecoy endpoints that log automated Internet scanning — the source IP is published by explicit design decision, correlated with MITRE ATT&CK and CISA KEV.star-organizerOrganises GitHub stars into a browsable catalog by category — generated automatically in the source repo, hand-vendored into this site.HomelabA k3s cluster on Raspberry Pi, at home — the ground where I test everything before it gets anywhere near production.

Featured tools

all tools →
Subnet calculatorCIDR, masks, broadcast, usable hosts, and binary representation.HashesGenerate and verify MD5, SHA-1, SHA-256, and SHA-512 for text or files.Encoder / DecoderBase64, URL, and hex — both directions, UTF-8 aware.Password generatorStrong passwords generated with crypto.getRandomValues, with an entropy meter.Email header analyzerPaste an email’s raw header and see the Received chain, the SPF/DKIM/DMARC verdicts, and the spoofing signals.What your photo revealsExtracts the EXIF metadata from a JPEG image — camera, date, settings, and GPS coordinates, if present.