← All work
Security · Tier 1

CyberWise

A security awareness and phishing simulation platform that banks run against their own staff to find out who is at risk, and then train them.
Role Architect · Project Lead → Product OversightEmployer Polygon Technology LimitedArea Security
Live ↗
CyberWise screenshot

Problem

Organisations had no way to measure employee susceptibility to phishing, and the banks that needed it most could not accept a cloud product inside their networks.

Approach

Integrated the open-source GoPhish project to carry the whole email-phishing setup instead of rebuilding one, and shipped a scripted installer that stands the platform up on multi-VM or single-VM with nothing to configure by hand.

Outcome

Deployed to 7+ banks covering 10,000+ employees

7+ bank deployments · 10,000+ employees covered

CyberWise sits in the same category as KnowBe4 and Wizer: run a realistic phishing campaign against your own organisation, measure who clicks, and turn that result into training. The hard part was never the simulation — it was that the customers who need it most are banks, and banks do not let a SaaS product touch their network. So the platform installs itself: a scripted installer stands it up on a multi-VM topology inside a DMZ-segmented bank network or on a single VM for a smaller tenant, with nothing to configure by hand. GoPhish is integrated rather than rebuilt, and the risk-scoring engine grades exposure company-wide and by cluster, department and individual — every score feeding the LMS that trains and re-tests the people behind it.

What I did

  • Integrated the open-source GoPhish project into the platform to run the full email-phishing setup rather than building a campaign engine from scratch — deployed to 7+ banks covering 10,000+ employees.
  • Built a scripted installer that stands the whole platform up on either a multi-VM topology inside a bank network or a single VM for a smaller tenant, with nothing to configure by hand.
  • Built the risk-scoring engine that grades exposure company-wide and by cluster, department and individual, feeding a full-phase LMS that trains each person and re-tests them until they get it right.
  • Ran client demos for banks and enterprise organisations.

Stack

Spring Boot (Java/Kotlin)GogRPCGoPhishTypeScriptKubernetesMinIOPrometheusGrafana🔒 Phishing simulation🔒 Risk scoring🔒 DMZ & segmented deployment🔒 SMTP

Screens

CyberWise screenshotCyberWise screenshot

More work

AI Tooling

Agentic Development Life Cycle (ADLC)

Author & Programme Lead

The engineering manifesto that replaced ad-hoc ticket work at my company with a phase-gated, human-approved delivery pipeline.

AI Tooling

Agentic Delivery Harness

Author

A delivery harness that drives an approved requirements document to shipped code through phase gates, and runs the same way on any coding agent.

▲ 4 agent platforms supported
Systems

Source?. Manga

Product Reviewer & Optimizer

A digital manga and video streaming platform.

▲ 20 TPS load-verified

Building something that needs this kind of engineer?

Hiring, contract, or an architecture problem — tell me the shape of it and I’ll come back with something specific.

Contact me →