┌──────────────────────────────────────────────────────────────────────────────┐ │ │ │ ██████╗ ███████╗██╗ ██╗██████╗ █████╗ ██████╗ ██████╗ │ │ ██╔══██╗██╔════╝██║ ██║██╔══██╗██╔══██╗██╔══██╗██╔════╝ │ │ ██║ ██║█████╗ ██║ ██║██║ ██║███████║██████╔╝██║ ███╗ │ │ ██║ ██║██╔══╝ ╚██╗ ██╔╝██║ ██║██╔══██║██╔══██╗██║ ██║ │ │ ██████╔╝███████╗ ╚████╔╝ ██████╔╝██║ ██║██║ ██║╚██████╔╝ │ │ ╚═════╝ ╚══════╝ ╚═══╝ ╚═════╝ ╚═╝ ╚═╝╚═╝ ╚═╝ ╚═════╝ │ │ │ │ SECURITY RESEARCHER · ZERO-TRUST ARCHITECT · AI ENGINEER │ └──────────────────────────────────────────────────────────────────────────────┘
"Hack ethically. Build defensively. Share everything."
I'm Jainam H. Maru — a security researcher, OS developer, and full-stack engineer who builds AI-powered defensive tooling and studies attacker behavior for a living (and a hobby). My sweet spot is where threat intelligence meets machine learning:
- 🕵️ Threat intelligence collection — honeypots, dark-web OSINT, MITRE ATT&CK mapping
- 🏰 Zero-Trust architecture — CISA ZTMM-aligned labs with OPA, oauth2-proxy, mTLS
- 🛡️ SIEM engineering — building CyberRakshak (Smart India Hackathon): Windows Event Log ingestion, correlation rules, MITRE-mapped detection, live SOC dashboard
- 🤖 AI engineering — LLM-assisted analysis (Ollama, Groq), ML malware detection with SHAP explainability
- 🎓 Education systems — building EduOS, an open-source operating system for education, secure exams & cyber training
I don't just write code — I document everything, CI-test everything, and open-source everything that can be.
-109-00FF41?style=for-the-badge&labelColor=0d1117){kind=icon}
| Project | Contribution | Status |
|---|---|---|
| beeware/toga | Fix AsyncResult.__bool__ so truthiness raises the helpful exception message |
✅ #4632 merged |
| pschanely/CrossHair | Fix keyword-only arg crash, max_iterations=0 NameError, and format_boundargs TypeError |
✅ #501 merged |
| Nayjest/GITO | Fix None crashes in answer(), cmd_answer, and deploy --commit |
✅ #318 merged |
| lissy93/web-check | Typos/grammar/broken-links fixes | ✅ #314 merged |
| OWASP/CheatSheetSeries | Grammar fixes on SQL Injection Prevention Cheat Sheet | ✅ #1549 merged |
| spore-host/spawn | Skip unassociated EIPs annotated aws:* in reconciler |
✅ #554 merged |
| jupyterhub/kubespawner | Fix implicit string concatenation breaking singleuser_lifecycle_hooks deprecation |
⏳ Open #933 |
| beeware/toga | Don't orphan SplitContainer content on invalid assignment | ⏳ PR #4633 |
| lissy93/web-check | Skip public API calls for non-routable IPs; add SECURITY.md | ⏳ PRs #320, #322 |
| scanapi/scanapi | Migrated pytest-freezegun → time-machine | ⏳ PR #1011 |
| sherlock-project/sherlock | DNS/Discord.bio/interpals false positives; --output no-rewrite; per-username counter reset; location-parse crash |
⏳ PRs #3080, #3083, #3084, #3085, #3094 |
| ossf/cve-bin-tool | Performance optimizations — trimmed test lockfiles, lazy DB init | ⏳ PR #5857 |
| xynehq/xyne | Skip empty Docling image chunk descriptions | ⏳ PR #1365 |
| orkestra-cc/orkestra | rustfs backup/restore check-sync fix | ⏳ PR #304 |
| common-workflow-language/cwltool | Fix resolve_local returning CWD-anchored URIs |
⏳ PR #2325 |
| aquasecurity/trivy-checks | Use glob patterns for TLS policies (AWS-0112 + AWS-0126) | ⏳ PRs #606, #607 |
| chubin/wttr.in | Serve localized 404 page for unknown locations | ⏳ PR #1292 |
| beefproject/beef | Fix URL-encoded command passed to shell execution modules | ⏳ PR #3637 |
| andyjmorgan/slipspace-gateway | Clarify Last4 contract for short secrets in redact() |
⏳ PR #562 |
| getaxonflow/axonflow | Complete the examples index in examples/README.md |
⏳ PR #462 |
| qeeqbox/social-analyzer | Fix typos in CLI options and install instructions | ⏸ Closed |
| donnemartin/system-design-primer | Fix typo: "Graphs databases" → "Graph databases" | ⏸ Closed |
| OWASP/Nest | Fix /repositories sitemap lastmod to use latest repository update |
⏸ Closed |
| OWASP/CheatSheetSeries | Add password cracking techniques to Password Storage Cheat Sheet | ⏸ Closed |
| pypsa-meets-earth/pypsa-earth | Exit after writing empty hydro profile to avoid NameError on inflow | ⏸ Closed unmerged |
| garagehq/nightcrawler | Catch loud nmap under sudo prefix during training-data cleanup | ⏸ Closed unmerged |
| fastapi/fastapi | Security best practices documentation | ⏸ Closed |
"Code with intention. Secure with ethics." — Jainam H. Maru