Independent Cybersecurity Engineering & AI Security Research
Building Practical Security Systems Through Hands-On Engineering
SMB Defense Technologies documents Christopher Bihiga’s independent cybersecurity engineering and applied security research, focused on external attack surface visibility, evidence-driven security assessment, continuous monitoring, detection workflows, cloud security, and AI-assisted investigation.
Independent engineering and research project work developed to demonstrate hands-on cybersecurity capability. Not a staffed 24/7 SOC or commercial managed security operation.
Prior enterprise experience
Cybersecurity Experience
9+ years of enterprise cybersecurity operations experience, including SOC work at IBM and SecureWorks, with hands-on experience across threat detection, cloud security, endpoint security, investigations, security tooling, and incident response workflows.
Under Active Development
Current Project — OrdoAI
An AI-native External Security Posture Management platform for small and mid-sized organizations. OrdoAI discovers Internet-facing assets, assesses external exposure, preserves historical evidence, monitors meaningful changes, enriches suspicious indicators, and explains remediation in plain language.
Key operating principle
Deterministic systems establish security facts. AI explains those facts.
Evidence Integrity
CompleteFindings Authorization / RLS
HardenedRedirect Intelligence v1
Approved NextChange Detection v1
PlannedAI Agents
FutureEngineering validation evidence
Validated Engineering
Verification results from the current development state, presented as engineering evidence rather than marketing metrics.
- 83 automated tests passing, 0 failed.
- TypeScript passes with zero diagnostics.
- Production build passes.
- demo.testfire.net validation: reachable HTTP 200, detector coverage successful, 13 open findings refreshed without duplicates.
- RLS isolation tests passed for same-tenant, cross-tenant, anonymous, status-only updates, invalid status, and service-role lifecycle in isolated PostgreSQL testing.
- Zero duplicate finding keys in validation scans.
Where to go next
Each area of the project is documented separately.