About me¶
Hi there! My name is Phil Massyn (CISSP), an AWS Cloud Security Specialist from Flagstone, Queensland, Australia.
Why this blog exists¶
I write about cybersecurity, GRC, and cloud - mostly AWS, since that's where I spend my working life - along with whatever tooling and side projects I happen to be tinkering with at the time. Most of it comes from things I've hit in the real world - a weird AWS behaviour, a breach worth picking apart, a tool I built because the existing options annoyed me. If it's useful enough for me to write down, it's probably useful to someone else too. That's the whole point of this site.
My Passions¶
- Writing code in Python - most of it ends up as a post here sooner or later.
- Riding my motorcycle (2022 CFMoto 800MT Touring)
- Continuous Controls Monitoring - it's why I built posture in the first place.
My Current Projects¶
- posture (GitHub) - a runtime-agnostic Python library for CCM data collection. Credentials in, DataFrame out - one class per source (Crowdstrike, Okta, JAMF, MDE...), runs unchanged in Docker, Airflow, or Databricks.
- mddoco (GitHub) - a Python CLI that generates HTML and PDF documents from Markdown, built because the existing tools were more trouble than they were worth (read more).
- cve-db - my own curated snapshot of the NVD, enriched with EPSS and KEV data, so I can actually prioritise vulnerabilities instead of just sorting by CVSS.
- Kickstand - a route-planning tool for motorcycle trips, built to fill the gaps I kept running into when planning rides with friends (read more).
- Citadel - a knowledge management MCP server for my AI tooling, giving Claude persistent memory of projects, decisions, and todos across everything I'm working on (read more).
- RSS - a social-network-like feed reader for consuming RSS chronologically, without the algorithm.
Connect with me¶
Updated on Fri Sep 11 10:02:16 UTC 2026