← All work
PortScanner
liveNmap automation suite producing risk-tagged, SIEM-ready JSON from a Python CLI or a FastAPI service.
- Role
- Author
- Period
- 2024 – 2025
PythonFastAPINmap
Context
Nmap output is excellent for a human at a terminal and useless to a SIEM without a translation layer.
The hard problem
Wrap scanning so that results arrive as structured, risk-tagged events a detection pipeline can ingest directly.
What I built
- Built a Python CLI and a FastAPI service over the same scanning core.
- Tagged findings by risk so downstream rules can prioritise without re-parsing.
- Emitted SIEM-ready JSON as the primary output format.
What it does not do yet
It automates Nmap; it does not replace it. The engineering value is in the output contract, not the scanning.