Skip to content
View mustafasercansak's full-sized avatar
1 follower · 0 following

Achievements

Achievement: Pull Sharkx2Achievement: YOLOAchievement: Quickdraw

Achievements

Achievement: Pull Sharkx2Achievement: YOLOAchievement: Quickdraw

Block or report mustafasercansak

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
mustafasercansak/README.md

Hi, I'm Sercan 👋

Security & automation-focused software engineer from Türkiye. My primary work is MSS — a central simulation and protocol management platform built with C#/.NET and React (REST/gRPC/MQTT/RTSP-ONVIF simulation, mock servers, Docker orchestration, an embedded multi-provider AI assistant, and automated test orchestration).

Selected open-source engines and systems from my ecosystem:

⚡ Flagship: Automation Sandbox

Open-source locator healing & intent-driven test generation engine for Windows Desktop (FlaUI/UIA3) and Web (Playwright .NET). An open alternative to black-box commercial locator recovery.

CI .NET Engines LLMs

  • Pure-Heuristic Healing: Deterministic structural similarity engine (ControlType, Hierarchy, Levenshtein Name, Bounding Geometry) with strict evidence & runner-up margin gates.
  • Multi-LLM Consensus Quorum: When heuristics aren't confident, falls back to a parallel shortlist evaluated across Claude, Gemini, OpenAI, and offline Ollama. Accepted strictly by independent multi-model consensus, guarded against hallucinated picks.
  • Resilience & Telemetry: Dual-timeout budgets ($15\text{s}/35\text{s}$), thread-safe jittered exponential backoff, dynamic Retry-After quota ceilings, and versioned healing telemetry reports (v6).
  • Intent-Driven Automation: Natural language intent planning and multi-framework test generation (Playwright C# / TypeScript, FlaUI C#).

🔐 Systems: ZeroTrust

A full-scale zero-trust authentication and authorization platform written from scratch.

CI Backend Tests Frontend Tests Frontend Coverage

  • Crypto-agile JWT signing (EdDSA/ES256/RS256) with algorithm-confusion protection
  • Hybrid post-quantum TLS (X25519MLKEM768, RFC 9370)
  • Standards-compliant OIDC Identity Provider — Authorization Code + PKCE, RFC 7009/7662
  • WebAuthn passkeys, step-up MFA, context-aware ABAC/RBAC, and device posture verification

Pinned Loading

  1. zerotrust zerotrust Public

    Zero Trust authentication and authorization platform — ES256 JWT, TOTP MFA, RBAC, service accounts, audit log, and session management. Built with Go, Vite/React, PostgreSQL, and Redis.

    Go

  2. odin-tracker odin-tracker Public

    Odin Tracker is a professional grade, privacy first pet health management dashboard. It combines cutting edge AI extraction for lab reports with a robust, personal data sovereignty model.

    TypeScript

  3. ansible-iam-monitor-stack ansible-iam-monitor-stack Public

    Infrastructure as Code (IaC) deployment of a secure homelab monitoring stack. Uses Ansible to automate Docker Compose setup for authentik (IAM/LDAP), InfluxDB (Time-Series Database), and Grafana (V…

    Jinja 1

  4. LicenseGuard LicenseGuard Public

    LicenseGuard is an enterprise-grade license compliance and security auditing module for Windows environments. It enables sysadmins to scan installed software, browser extensions, and running proces…

    PowerShell

  5. swagger-sentinel swagger-sentinel Public

    Opinionated OpenAPI 3.x validator and test generator with a 130-point checklist.

    HTML