POA&M Automation Tool
Turns Nessus, Tenable, Qualys, and Wiz exports into FedRAMP-compliant POA&Ms. NIST 800-53 mapping, dedup, and live VDR reports with CISA KEV + EPSS lookups.
SecurityGRCAutomation
View repo →
Offensive + Cloud Security
Brian Montiel
building Cloud Security _
Security analyst, hacker, and builder focused on FedRAMP, cloud security, and building tools that make compliance work less painful.
11Projects
5Certifications
7HTB Write-ups
01 / workspace
Projects
CloudGRC
Multi-cloud evidence collector for AWS, Azure, and GCP. Covers 180+ resource types and 230+ automated checks mapped to NIST 800-53, packaged into audit-ready bundles.
CloudGRCSecurity
View repo →
CMMC Toolkit
Terminal CLI for CMMC 2.0 readiness. Gap assessment with SPRS scoring, SSP builder with multi-format export, and a searchable library of all 110 practices.
GRCSecurity
View repo →
Pentest-Deephat-AI
Local-first pentest and CTF notebook with AI help, Markdown editing, and exportable notes.
SecurityAutomation
View repo →
FedRAMP20x KSI Trust Center
A demo trust center built for FedRAMP20x experimentation and practical learning.
SecurityGRC
View repo →
OCR Screenshot Renamer
Renames screenshots from visible text and image content, turning generic names into readable files like aws-vpc-route-tables.png.
SecurityAutomation
View repo →
Full-stack Solana dApp (Anchor)
Built with PDAs, wallet integration, and TypeScript tests.
Solana
View repo →
Audit Screenshot Organizer
Python desktop tool that auto-groups screenshots into session-based evidence folders.
SecurityAutomation
View repo →
FedRAMP Assessment Assistant
Offline checklist app for FedRAMP and NIST 800-53 assessments with evidence tracking.
SecurityGRCAutomation
View repo →
ClamAV File Scanner
Local scanning tool for malware detection and audit-ready scan evidence.
Security
View repo →
02 / stack
Skills & Tooling
$ cloud & infra
AWSAzureGCP
DockerLinux
$ offensive security
Penetration TestingRed Teaming
C2 / CRTOHTB / CTFOSINT
$ grc & compliance
FedRAMPNIST 800-53
CMMC 2.0POA&MSPRS
$ languages & tooling
PythonRustTypeScript
BashSolana / Anchor
03 / writeups
Labs
04 / credentials
Badges & Certifications
CRTO
PNPT
School of Solana S8
eJPT
CySA+
05 / connect