CYBERSECURITY / SOFTWARE DEVELOPMENT

Lordms.

Muhammet Sarıdoğan

Security-minded. Software-driven.

I explore web and API security and build Python tools, automations and web interfaces.

Share a job opportunity
Lordms brand artwork: a hooded figure looking over a futuristic city beneath a turquoise-lit orb.
PERSONAL PORTFOLIOCuriosity. Practice. Evidence.

SELECTED WORK

Working code. Inspectable results.

A local security demo, a source-backed software example and more open-source work.

All repositories
Security work

Local tool · v0.1

TenantLens

Compare expected access with the actual HTTP response in one place.

An actual screenshot from the local TenantLens demo. It shows access expectations, HTTP responses and evidence for a selected authorization violation across three demo accounts and three resources.
A local-demo screenshot from the repository. Accounts and data are synthetic; this is not a vulnerability found in a real system. The original interface is shown in Turkish.Open full-size screenshot

In the synthetic demo, an invoice request that should be denied returns HTTP 200. The interface shows the relevant matrix cell alongside response evidence.

  • Python
  • SQLite
  • React
  • TypeScript
  • Vite
Software work

Synthetic lab project

Sports Data Parser PoC

Accept a valid boundary value and reject overflow with a specific error code.

Valid 32-bit upper boundInput4294967295,Max,4294967295Expected test resultSPORTS_PARSE_OK
ID exceeds the 32-bit limitInput4294967296,name,2Expected test resultSPORTS_PARSE_INVALID_ID

Inputs and expected status codes from the repository’s C tests. They have not been rerun here.

The C tests distinguish the largest valid 32-bit value from an overflowing ID through explicit status codes. You can inspect those expectations in the source.

  • C11
  • GCC
  • Clang
  • ASan
  • UBSan
CLOUD SECURITY & AUTOMATION

Alpha

AWS-DNS-Sentinel

Compare current records with a baseline and inspect changes through a dry run first.

A Python baseline-and-drift workflow with a dry-run step before remediation. The implementation and safeguards are inspectable in the repository.

  • Python
  • Boto3
  • Amazon Route 53
PYTHON & PUBLIC-PROFILE RESEARCH

Beta

Dedektif

Organize public-profile queries through a CLI and desktop interface.

Combines asynchronous Python queries with a CLI and PyQt5 interface. A profile candidate is not a verified identity.

  • Python
  • asyncio
  • aiohttp
  • PyQt5

CI records were reviewed on October 12, 2026. Counts reflect those runs; they are not an independent security audit.

WORK TOGETHER

Where can we start?

These scopes are starting points for a conversation. Needs, access and deliverables are agreed together.

ABOUT

Turning curiosity into practical work.

Education

Harran University

Computer Engineering

Studies in progress

I’m Muhammet Sarıdoğan, a Computer Engineering student at Harran University. My cybersecurity focus is web and API security, alongside building Python tools, automations and web applications. I put what I learn into practice through hands-on projects, testing and clear technical documentation.

01

How I work

Clarify the problem and scope first, then build in small steps, test and document the results.

02

Transparent development

I use AI-assisted tools in my development workflow. Each project page separates my working focus, available evidence and limitations; I do not claim that every line of code was written solely by me.

CONTACT

Let’s discuss the next project.

Share a short description of your project or the role you have in mind. We can clarify the scope together.

These buttons open your email app with a prepared subject and message. Nothing is sent until you send it.

Work and project inquiries

GitHub profile