I run blue team operations and build AI-powered tooling that makes security teams faster and hopefully better — from alert triage to incident response.
What I work on
- tinysiem — a lightweight, self-hosted SIEM for small security teams that can't afford the enterprise stack
- phishing-analyzer — self-hosted AI-powered phishing analysis with mobile browser emulation
- wazuhclaw-gateway — chat with your SIEM through an AI gateway
- awesome-soc — curated tools & resources for SOC analysts
- seduhmanual — a V60 pour-over coffee brewing webapp (security people need good coffee too)
About me
- 13+ years in security operations — leading SOC teams, building detection programs, running incident response, threat hunting, and threat intelligence programs
- AI-enabled SOC believer: agents that triage alerts, analyze phishing, and execute playbooks — so humans do the thinking, not the clicking
- I teach and write about the human side of security operations at blueteam.id
- Active in BlueTeam.ID and CDEF Indonesia, the communities I helped build
- Outside of security: Japanese language learner, V60 enthusiast, Manchester United fan
Selected wins
- Built and scaled SOC and MSSP operations for Indonesian companies from the ground up, leading multiple teams inside them
- Co-founded and led CDEF Indonesia, the country's first cyber-defense-focused community
- Co-founded blueteam.id, the first blueteam-focused online learning platform in Indonesia
- Now channeling that operational experience into AI-assisted tooling that closes the gap between under-resourced SOC teams and enterprise-grade capabilities
"Not a coder" — but I ship tools that make security teams faster.