← Back to projects & research
Security home labOngoing
Security home lab
Real traffic. Controlled access. Hands-on detection testing.
Outcome
A live sensor against real scanner and brute-force traffic, used to validate detections and practice incident response workflows.
The problem
Validating detections and rehearsing incident response needs a real target exposed to real traffic, without leaving general-purpose administrative access on the internet.
What I built and owned
Self-managed Linux environment with key-only SSH, a default-deny firewall, Fail2ban, and CrowdSec, with administrative access moved behind a Tailscale overlay network.
Project context
This is a self-managed research environment used for detection testing and incident response practice.