Project Description

Employer · BlackCloak · Client Success Specialist

Two builds that put AI and automation to work in a live security operation

BlackCloak protects executives and their families from digital threats. Inside that operation I built two things that quietly proved AI and automation belong in production security work — not as demos, as tools people used every day.

Build one · the phishing analyzer

A ChatGPT-based phishing analyzer — sentiment analysis plus NLTK token-scrubbing — that cut client prep from an hour to moments. An early proof that AI, wired into a real workflow and checked, does production work.

1 hr
→ moments
120+
hours saved
2022
AI in production

Build two · the flagship

The scanner sales reps actually use

BlackCloak had a powerful internal tool — a Dehashed breached-credential scanner that showed prospects exactly how exposed they were. It lived behind SSH, and only three engineers could run it. Everyone else filed a ticket and waited.

A 30-second tool with a two-to-four-day turnaround.

I just moved the front door to Slack

The Python core never changed. I wrapped it in a container and put a Slack interface on it, wired through n8n.

Slash command

A rep types /dehashed-scan right where they already work.

Block Kit modal

A form collects the domain, scan depth, and where to post — validated before it runs.

n8n webhook

Receives the request, authorizes it, and orchestrates the run.

Containerized script

The original Python runs isolated and reproducible — no server access needed.

Results in Slack

Formatted findings post back to a private channel in seconds, with a full log.

What changed

Same tool. New front door. The interface was the whole difference.

3 → 30+
people who can run it
2–4 days → 30 sec
turnaround
SSH keys → SSO
how access works
none → full
audit trail

The security paradox

The security team pushed back at first — a security tool, in Slack? Then they saw the controls.

The Slack version was more secure than the SSH one — SSO auth, channel-based access, every run logged, and revoking someone is one click instead of hunting down keys.

Your tools are only as good as their interface. The best one is the one your team already has open.

Have a powerful tool nobody uses?

The capability already exists. It just needs a front door your team will actually walk through. That’s the build.

Book a 20-min callSee the method →