// rootdrifter — security practitioner

Root//Drifter

Hardened systems · offensive methodology · detection engineering

● Active ● Available

Not technical? Start here →

Security knowledge is a right, not a product. rootdrifter is building in public to prove it.

About

rootdrifter is the working handle of a security professional building toward entry-level roles in the UK, Netherlands, and Germany.

The approach is to build and to break with the same discipline, and to document both to a standard a reviewer can audit. That has produced a hardened Linux workstation and a compartmentalised mobile platform, a grey-box penetration test mapped to recognised benchmarks, and dissertation-level research into whether language models can reason causally about social engineering rather than just pattern-match it. Current focus: CompTIA Security+, active CTF practice, and a Wazuh SIEM home lab for hands-on detection engineering.

Academic background: a First Class BSc in Computer Networks & Cyber Security. This site stays pseudonymous by design — a named CV with full academic and contact detail is available on request.

Portfolio

Full portfolio →  all seven projects

Utilities

DRIFTDECK is the suite side of the site — local-first pipelines with public, read-only status surfaces. Every panel is a staged projection: verdicts, counts, and states only.

Live DRIFTDECK — the utilities deck: modules, access, and the utilities index
Live Longhand — status page: a published copy of its results (private; sign in to open it)
Live Console Suite — cross-module status board, verdicts and counts

Latest writing

22 Oct 2026 1 min read Build Log
October: the application composer, first release in build

October: the application composer, a local tool that tracks and guides each job application, is in build for its first release.

Read →
22 Oct 2026 1 min read Build Log
October: a GrapheneOS phone with a setup walkthrough, done by the book

October: I am testing whether a GrapheneOS phone sells better with an educational setup walkthrough, after reading the rules first.

Read →
22 Oct 2026 1 min read Build Log
October: every task gets a launch code

October: every task now has a short launch code, typed as a word and a number, that is dry by default.

Read →

All posts →

More transmissions incoming · Subscribe for early access

Active work

In progress CompTIA Sec+ SY0-701
In progress Wazuh SIEM home lab — detection engineering
Live rootdrifter.io — content platform, publishing progressively
Available Entry-level roles — UK / NL / DE

Contact

// available for work

[email protected]  ·  github.com/rootdrifter

Open to security roles in the UK, Netherlands, and Germany. CV available on request.