// whoami

Alli Operations.
Zero mediocrity.

Cybersecurity practitioner based in South Florida. Red-team focused, perfectionist by default. I don't tell you something is secure unless I've tried to break it myself.

// bio

The short version.

I started with Harvard's CS50 and never stopped. My track is offensive security — ethical hacking, penetration testing, and OSINT — with hands-on Kali Linux work behind everything I claim. I'm on the CompTIA Security+ SY0-701 track and specializing further in Web3 and AI security, because that's where the attack surface is moving.

My ethos is simple and non-negotiable: zero mediocrity. I don't ship a report I wouldn't defend line by line. I don't make a claim I can't back with a tool, a number, or a working proof-of-concept. If I can't prove it, I don't say it.

// certifications

In progress & earned.

EARNED

HarvardX CS50x

CS50's Introduction to Computer Science — Harvard University / edX. Verified certificate. The foundation everything else builds on.

IN PROGRESS

CompTIA Security+ SY0-701

The industry-standard entry credential for security roles. Covers threats, architecture, implementation, incident response, and governance. Exam prep underway.

SPECIALIZING

Web3 & AI Security

Smart-contract auditing and LLM security. SheFi Season 16 graduate (DeFi & Web3 finance). Where offensive security is heading next.

// tools_of_trade

What's actually in my kit.

Not a marketing list. These are the tools I use on real engagements — and I can explain exactly what each one does and why.

Kali Linux — the offensive-security base distro
Hermes — threat scanner for footprint mapping
Burp Suite — web app interception & testing
Nmap — network discovery & port scanning
Metasploit — exploitation framework
Amass — subdomain enumeration & recon
Nuclei — templated CVE scanning at scale
Slither / Foundry — Solidity static analysis & fuzzing

// philosophy

How I work.

Prove, don't assert

Every finding comes with a working proof-of-concept. "This might be exploitable" is not a finding — it's a guess. I don't hand you guesses.

Plain language

Your board and your engineers read different sections. I write both. No jargon where a sentence will do, no dumbing down where precision matters.

Authorized, always

Ethical hacking means written permission. I require an authorization-to-test agreement for every engagement. The line between me and a criminal is that signature.

Small roster, deep work

I keep the client list tight on purpose. You get my attention, not a junior's, and not a template with your logo pasted on top.

Alli Operations.Zero mediocrity.