Pensacola, Florida  ·  30.42°N 87.22°W

Andre
Hogan

Cybersecurity and networking by trade. I build the whole thing — the app, the backend, the network it runs on, and the automation that keeps it alive while I sleep.

01

Selected work

Nine years of side projects, shipped alone. Each one is real software with users, not a tutorial repo.

  1. Fujibank

    Native macOS + iOS · Swift, SwiftUI, USB/PTP

    fujibank.app →

    A film-simulation recipe studio for Fujifilm photographers. It reads every custom-setting bank straight off the camera over USB — probing how many the body actually has instead of assuming — writes recipes back with per-field read-back verification, and develops RAF files through the camera's own RAW engine so the result is the camera's colour, not an approximation.

    • USB / PTP protocol work
    • Read-modify-write with verification
    • Tethered RAW develop
    • JSON library, Git-syncable

  2. Wasteland

    Threat intelligence · Python, LLM pipeline, Resend

    wasteland.me →

    A weekly cyber threat-intelligence briefing that goes out to a real subscriber list. The whole chain is automated: scheduled research jobs pull and correlate primary sources into a vetted intel database, a drafting pass writes the issue, and a deterministic QA gate fails the draft on unverified CVE IDs or borrowed analyst jargon before anything reaches an inbox. A human still presses send.

    • CVE verification against a source-of-truth DB
    • Automated editorial QA
    • Cron-driven research fleet
    • Email delivery at list scale

  3. Bellwether

    Self-hosted trading terminal · FastAPI, Schwab API, MCP

    private deployment

    A multi-asset trading terminal: scanner desks for options, day-trade momentum and sub-$5 runners, a multi-account portfolio monitor, and one-click execution against live Schwab accounts. Orders are preview-only until live trading is explicitly armed, and the AI agent side is reachable over MCP with a trade-scoped token bounded by hard limits. SSO-gated, Dockerised, push-to-deploy.

    • Real brokerage execution
    • Capability-scoped tokens
    • Live market data
    • Self-hosted CI/CD

  4. Inkfall

    macOS utility · WhisperKit, CoreML, Apple Intelligence

    Mac app

    Offline dictation for the Mac. Hold a key, speak, and the text lands in whatever app you're in — transcribed and cleaned up entirely on-device. Zero network calls by design: no cloud transcription, no telemetry. Every transcript hits the clipboard before insertion is attempted, so a failed paste degrades to ⌘V instead of losing your words.

    • On-device Whisper (CoreML)
    • Custom vocabulary conditioning
    • Accessibility-based insertion
    • No network, provably

  5. Folio

    iOS · SwiftUI, SwiftData, WKWebView rule engine

    iOS app

    Tracks credit-card points and miles by scraping issuer dashboards on the phone. Credentials and balances never leave the device. Scraper behaviour ships as ed25519-signed rule files served over the network and bundled into the app as a cold-start fallback — so a bank redesigning its dashboard is a signed JSON update, not an App Store release.

    • Signed rule distribution
    • On-device only, by architecture
    • Declarative scraper engine

  6. Halworth

    Browser game · TypeScript, no engine

    playable

    A horror-mystery text adventure set in the wreckage of a research institute: 50+ rooms across seven wings, nine endings, and rooms whose prose changes once you know more than you did. Type commands or click them — both paths hit the same parser. Built with sound design and save slots, without a game engine.

    • Hand-rolled parser
    • Nine endings, state-gated
    • Original sound design

Also built

  • Cobble Circuit — a public Minecraft server with a custom progression mod: per-region team storage, gym gating, an endgame league. Strangers play on it.
  • Marquee — a terminal front door to a 400-title Plex library; browse and play without leaving the shell.
  • War.Games — a pixel-art multiplayer arena shooter with classes, waves and a leaderboard.
  • Job aggregator — six-source scraper for cleared cyber roles, with relevance filtering over a 1.6M-row dataset.
  • Parametric CAD — printed enclosures modelled in code, with printed gauges to measure the dimensions nobody publishes, plus RP2350 firmware with a real test suite running on the microcontroller.
02

Experience

Where the day job has been.

03

Practice

What I reach for, and what I actually run.

Security

Detection engineering, threat intelligence, CVE triage against primary sources, network segmentation, zero-trust ingress, edge protection and DDoS fronting for services with real users.

Networking

VLAN design and firewall policy on UniFi, site-to-site and client VPN, DNS and reverse-proxy topology, TLS everywhere, keeping a public game server reachable without exposing its origin.

Software

Swift and SwiftUI for native Mac and iOS, Python and FastAPI on the backend, TypeScript on the front, SQLite and Postgres, plus the CAD and microcontroller work when the project needs hardware.

Infrastructure

A three-node Proxmox cluster running the lot: containers, Docker, self-hosted CI runners, scheduled pipelines, encrypted offsite backups, and monitoring that pages me when something quietly stops.