TOM COLLIER
I emulate advanced adversaries against enterprise-scale environments — planning, executing and reporting the campaigns that expose critical gaps before someone else does.
FLAGPOST
The modern, open-source CTF platform. Self-hosted and batteries-included: real-time WebSocket scoreboards, a no-code automation engine, CRDT-backed collaborative notes, and a built-in support desk. Built after running a 1,900-student competition on tooling held together with plugins and spreadsheets.
CTFd Support Ticket Plugin
A support-desk plugin for CTFd — tickets, screenshots and admin guidance inside the platform. Built to survive a 1,900-player event.
tbcsec.io
A static site with a hand-rolled WebGL datamosh engine and a decoy homepage that gets taken over. No trackers, no cookies.
Writeups on red teaming, CTF infrastructure and tooling will land here. The pipeline is live — point your reader at /rss.xml and you'll be first to know.
The inbox is open — engagement inquiries, collaboration, or questions about Flagpost.