Cybersecurity & Edge Infrastructure — Independent Engineer

Fabrizio Salmi

Working at the intersection of Enterprise Reliability and Creative Innovation. Open-source tools for autonomous infrastructure, AI security, and sovereign tech.

4,510 stars Published research TLA+ verified protocol

GitHub LinkedIn ResearchGate

Previously

MainStreaming · Borsa Italiana / LSEG / Euronext · SORINT.lab · Userfarm · Clouditalia

20+ years across streaming infrastructure, financial markets, and edge networks.

14 recommendations on LinkedIn →

Featured

4,510 total stars across 92 repositories

certmate

Self-hosted certificate lifecycle management: issue, renew, discover, inventory and deploy TLS certificates across your infrastructure

Python 111 17 v2.33.0 MIT

caddy-waf

Caddy WAF (Regex Rules, IP and DNS filtering, Rate Limiting, GeoIP, Tor, Anomaly Detection)

Go 35 10 v0.4.15 AGPL-v3.0

zion

High-performance TLS reverse proxy with built-in WAF, written in Rust.

Rust 3 3 v0.8.4 Apache 2.0

llmproxy

Security-first proxy for Large Language Models

Python 4 3 v1.35.0 MIT

Currently available for

NIS2 Gap Assessment

Automated compliance mapping (D.Lgs 138/2024, Art. 21-23). Risk scoring by domain, prioritized remediation roadmap. Fixed price, delivered in 5 working days.

Edge Security & WAF Architecture

Caddy/Envoy/custom edge deployment, WAF tuning, multi-tenant certificate infrastructure.

AI Security & LLM Gateway Hardening

LLM proxy hardening, DLP for AI endpoints, prompt injection defense, audit/compliance for AI workloads.

Open-source consulting for European organizations

Sovereignty-aligned, code-first, NIS2-ready.

Email me LinkedIn

Research

Decentralized protocol design with formal verification. Published research on ResearchGate.

AIMP -- AI Mesh Protocol

Serverless networking protocol for resilient state synchronization between autonomous agents. Merkle-CRDTs, Ed25519 identity, integer log-odds epistemic layer. Formally verified via TLA+ (46,063 states, 199,902 configurations). 98-142x faster than Subjective Logic / Dempster-Shafer.

Rust TLA+ formal verification Noise Protocol XX MIT

Published Papers

I AIMP: Design and Evaluation of a Serverless Merkle-CRDT Protocol for Edge Agent Synchronization II Epistemic Layer: Integer Log-Odds Belief Aggregation and Trust Propagation III Correlation-Aware Aggregation: Grid-Cell Discounting for Correlated Evidence Sources IV Deterministic Semantic Topologies: SimHash Embeddings and Autonomous Edge Generation

Web Security & Edge

WAF platforms, certificate lifecycle management, threat detection, and edge security tooling.

patterns

Automated OWASP CRS and Bad Bot Detection for Nginx, Apache, Traefik and HaProxy

wildbox

An open-source security platform for the community. Unified SIEM, SOAR, WAF, and more in a single, self-hosted solution.

Python 11 6 v0.10.0 MIT

caddy-mib

Track and ban client IPs generating repetitive errors on Caddy

Go 5 4 v1.0.1 AGPL-v3.0

secure-proxy-manager Secure proxy solution with filtering, real-time monitoring and a modern web UI. 45 limits Automated rate limits implementation for web servers 20 nginx-waf-ai Automatically detect threats and deploy WAF rules using machine learning 11 fqdn-model Tiny and fast FQDN classifier to detect malicious domains 7 caddy-feeds IP blacklist, DNS blacklist and OWASP rules daily updated for caddy-waf 2 domainmate Domain and security monitoring system 2 netfence Like Envoy xDS, but for eBPF filters 1 proxymate macOS menu bar proxy with WAF, privacy, AI agent enforcement, and threat intelligence 1

Autonomous Infrastructure

Proxmox autoscaling, Cloudflare automation, DNS management, and network monitoring.

proxmox-vm-autoscale

Automatically scale virtual machines resources on Proxmox hosts

Python 23 8 v1.7.2 MIT

proxmox-lxc-autoscale

Automatically scale LXC containers resources on Proxmox hosts

Python 15 6 v2.0.5 MIT

lws Unified command line interface for Proxmox, LXC and Docker. 75 websites-monitor Websites monitoring via GitHub Actions/API (expiration, security, performances, privacy, SEO) 58 cf-box cf-box is a set of Python tools to play with API and multiple Cloudflare accounts. 34 proxmox-lxc-autoscale-ml Automatically scale the LXC containers resources on Proxmox hosts with AI 33 zonecontrol Cloudflare Zones Settings Automation using GitHub Actions 27 dnscontrol-actions Automate DNS updates and rollbacks across multiple providers using DNSControl and GitHub Actions 19 proxmox-cluster-balancer Balance, scale, migrate your LXC fleet across your Proxmox nodes 10 wafcontrol Cloudflare WAF Settings Automation using GitHub Actions 7 proximity An immersive management layer for Proxmox based personal infrastructure. 5 cloudflare-backup-actions Cloudflare zones and records backup via Github Actions 2 asn-api ASN intelligence system New rainlogs Cloudflare log archiving for NIS2-compliant European businesses New

Compliance, AI Security & Sovereign Tech

Tools aligned with European data sovereignty, AI safety, and NIS2 readiness.

blacklists

Daily updated domains blacklist 🚫

Python 6 8 GPL-v3.0

nis2-public

NIS2 Continuous Posture Management and Remediation Platform

Python 9 5 v2.6.21 AGPL-v3.0

aidlp

Data Loss Prevention (DLP) for LLM endpoints.

Python 5 3 v4.0.1 MIT

AI & Data Tooling

Experiments and utilities.

UglyFeed Retrieve, aggregate, filter, evaluate, rewrite and serve RSS feeds using Large Language Models for fun, research and learning purposes 320 DevGPT Code together, right now! GPT powered code assistant to build project in minutes 71 iamnotacoder AI code generation and improvement 34 csv-anonymizer CSV fuzzer/anonymizer 10 newsgator Yet another RSS feed aggregator with LLM powers. 10 ethical-ai Automate LLM ethical self-assessments 7 audiogen AI-Powered Sound Generation & Classification. 5 llm-benchmarks benchmarking large language models (LLMs) with a focus on their mathematical capabilities 3 silicondev Local LLM fine-tuning and chat for Apple Silicon 3 navigator The Sentient Interface SDK. Navigate the web with gesture, voice, and predictive AI. 1

Other Projects

Utilities, experiments, and cross-domain tooling.

brandkit Yet another brand assets generator 80 proxxx Terminal cockpit for Proxmox VE & PBS: Rust TUI + CLI, single static binary, eight-stage commit gate, no agent on the cluster. 28 pdf-ocr Self-hosted Flask web app that OCRs scanned PDFs into DOCX, TXT, Markdown or HTML. Tesseract, EasyOCR, PyOCR or PaddleOCR. Docker image included. 25 webtek WebTeK: the worldwide streaming teknival ꩜ https://webtek.live 9 mixi Deterministic audio workstation. Browser-native. Zero install. Dual decks, Rust/Wasm DSP, WebGPU visuals, 19 instruments, automixer, beatmatching, 17 skins, MIDI, headphone cue. 6 aimp A serverless networking protocol designed for resilient state synchronization between autonomous agents in fragmented, low-bandwidth networks 5 flareover Deterministic, 0% false-positive engine to migrate your proxied CDN/WAF edge to EU-sovereign self-hosted infrastructure (Caddy · caddy-waf · PowerDNS · CertMate · MinIO). AGPL. 5 l0-compressor l0-comp compresses any command's output with generic, format-aware filters instead of maintaining a parser per tool. 5 You-Know-What-AI-Mean A practical guide to AI ethics and responsibility, built from a real-world incident — and from the body of work that came after. 5 naso Self-hosted breach and dark-web exposure monitoring: ingest leaks, correlate identities, triage with a local LLM. Your infrastructure, your data. 4 speedmate A lightweight, zero-configuration WordPress performance plugin 4 certmate-tools Free, privacy-first client-side TLS / certificate / ACME tools — companion to CertMate 3 mixi-cut Open-source timecode vinyl signal generator for DVS lathe cutting (MIXI-CUT protocol) 3 ai-security AI Security - Guida in Italiano 2 open-bpm High-accuracy BPM detection 2 open-video-watermark A video watermarking web application 2 tanstack-compromise-checker Shell script to detect TanStack npm supply chain attack indicators (CVE-2026-45321 / GHSA-g7cv-rxg3-hmpx) 2 l0-memory Minimal long-term memory for AI assistants: Go MCP server + SQLite + VSCode extension 1 nis2-model NIS2 Compliance Assistant 1 noted MacOS desktop app for taking notes in Markdown/HTML, with built-in AI, note links (wikilinks), global search, local history, and Git integration 1 slopless Static analysis for AI-slop patterns. Regex, AST and type checks, auto-fix, SARIF output. 1 agssh Air-gapped static-surface hardening (egress/CSP/headers/DNS) New ai-dependency-guard Automatically scans your PRs and commits to ensure no LLM-hallucinated packages enter your dependency tree New ai-hallucination-research Empirical Analysis of AI-Induced Dependency Hallucinations New awesome-go A curated list of awesome Go frameworks, libraries and software New awesome-mcp-servers A collection of MCP servers. New awesome-rust A curated list of Rust code and resources. New awesome-security A collection of awesome software, libraries, documents, books, resources and cools stuffs about security. New awesome-sysadmin A curated list of amazingly awesome open-source sysadmin resources. New awesome-threat-intelligence A curated list of Awesome Threat Intelligence resources New certmate-agent Lightweight LLM-powered assistant for CertMate. Local LLM + 1:1 REST tools + RAG over docs. New chatterbox-tts-api Local, OpenAI-compatible text-to-speech (TTS) API using Chatterbox, enabling users to generate voice cloned speech anywhere the OpenAI API is used (e.g. Open WebUI, AnythingLLM, etc.) New computer Give your agent a computer 👾 New fabgpt-faq Risposte tecniche su Cybersecurity, AI & LLM, Proxmox e Cloudflare New fabriziosalmi.github.io Landing page and canonical privacy notice for my GitHub Pages project sites New free-claude-code Use claude-code for free in the terminal, VSCode extension or discord like OpenClaw (voice supported) New github-social-preview-generator Deterministic, offline social preview images for GitHub repositories. Zero dependencies, no secrets, no network at render time. New homebrew-flareover Homebrew tap for flareover — deterministic Cloudflare → EU-sovereign migration engine (0% false positives) New homebrew-proxxx Homebrew tap for proxxx — terminal cockpit for Proxmox VE & PBS New l0-git Deterministic project-hygiene quality gates for the open workspace (cli + MCP + VSCode extension) New logos Dynamic SVG asset generation service built in Go New mixi-decks Drop-in plugins for the Mixi platform New occam-gitignore Generate the canonical .gitignore for any repo — deterministic, fast, hash-verifiable. New occam-observer An Out-of-Band, Event-Driven Git Telemetry Daemon New ProxmoxVED Development Instance of ProxmoxVE! New self-hosted-git-client An awesome self-hosted Git Client New space23 Music-driven vertical shoot-'em-up that runs in your browser. Godot 4 + WebAssembly, deployed to GitHub Pages. New terraform-provider-arubacloud Terraform/Open Tofu Provider ArubaCloud New txt2vst Generate VST3/AU instruments from natural language New website Let's Encrypt Website and Documentation New

4,510

Stars

92

Repositories

397

Forks

5

Languages

Python (40) Go (12) TypeScript (8) HTML (7) Rust (7) Other (6)