Hi - I'm Oleh Bezsonov, an independent security engineer building tools for SOC teams that would have been useful when I was working as a security analyst.

What I'm working on

Whitelist Manager for Splunk Enterprise Security
This is my current flagship project. It's a Splunk app that lets SOC analysts manage detection-rule whitelists through a web UI with a full diff-based audit trail. Rather than editing CSV lookups directly (which breaks audit and invites operator-error incidents), analysts get inline editing, approval workflows, version control, role-based access, emergency lockdown, and tamper-evident audit emission.

It's Apache 2.0, signed via Sigstore + Rekor for supply-chain integrity, AppInspect-clean for the Splunk Cloud Vetting profile, and has a CI matrix of unit + integration + E2E + a11y + security tests.

Why sponsor this work

I built this on my own time because I couldn't find an application that could satisfy my needs. Most existing tools either skip the audit trail entirely or treat it as an afterthought - which is exactly the wrong tradeoff for a security team that may need to defend an investigation.

Sponsoring this work funds:

• Focused time on Whitelist Manager (post-rc1: dark-theme polish, multi-org adaptability, a richer approval workflow)
• New open-source SOC tooling in the same style - solo-maintainer friendly, signed releases, audit-first design
• Faster response to community issues + documented SLA on bug fixes

How to support

• 💖 GitHub Sponsors — monthly or one-time, any tier
• ⭐ Star the repo — helps discoverability for other SOCs
• 🐛 Report issues — Whitelist Manager is in its public hold
  period; finding bugs now is high-leverage

Thank you for considering - every sponsor lets this work stay open-source and updated.