Vulnerability Management · Security Leadership

Security leadership,
built on automation.

Hi, I'm Joe. I lead vulnerability management and security engineering teams, and I'm happiest when I'm still close to the work, building the tools that make it run. Most of what's here started as something my team needed. Twenty years across security, cloud, and infrastructure, and still learning every week.

Connect on LinkedIn View GitHub

Joe Cook

20+

Years in IT

Engineers led

Multi-company

Managed services

AI-driven

Security operations

Open-source work

vm-ops-consoleFlagship My flagship: a browser-local vulnerability-management operations console that unifies everything below into one app — CVE intelligence, a findings workbench, a Tenable VM dashboard, and an AD-vs-agent coverage reconciler — under one nav, one theme, and a natural-language Ask AI box. A daily Morning Report leads with what's newly exploitable (and rolls up the weekend on Mondays). Scan data, findings, and keys never leave your browser; no backend, no build step. → cve-explorerFlagship A modern front end over the CVE corpus that leads with prioritization, not just CVSS: ask in plain English, get a morning briefing on what's newly exploitable, and open any CVE for a verdict drawn from a dozen-plus public sources (EPSS, CISA KEV, NIST LEV, CISA SSVC, Red Hat, Ubuntu, exploit feeds…). Plus a 100% client-side Tenable export analyzer — no backend, no build step. → tenable-vm-dashboardFlagship A 100% browser-local dashboard for Tenable Security Center exports: drop in your cumulative and mitigated vulnerability details and get SLA-driven KPIs, segment and OS breakdowns, and most-exposed hosts — the data never leaves your browser. Single static page, works offline. → agent-coverage-dashboardFlagship A 100% browser-local dashboard that reconciles Active Directory against your Tenable, ManageEngine and CrowdStrike agents to find coverage gaps, stale agents, and orphans — per machine, with AD-aware filters for real systems and recent logons. The data never leaves your browser. → agent-supply-chain-scannerAI SAST for AI agent instructions: detects prompt injection and malicious instructions in skills, MCP servers, hooks, and prompts. Zero-dependency Python CLI with JSON/SARIF output, plus a client-side browser playground. → cve-remediation-agentAI A Claude tool-use agent that triages a CVE against NVD, EPSS, and CISA KEV, then drafts a detect/fix/validate/rollback remediation playbook for review. → cve-patch-lookup Enter a CVE and instantly see its severity, exploitation likelihood, KEV status, and the patches and fixed versions that address it. Static, free, no backend. → remediation-playbooks Remediation scripts and runbooks: detect, fix, validate, rollback. One folder per finding, with a CVE-to-PowerShell remediation catalog. → security-plus-prep Free, browser-based CompTIA Security+ (SY0-701) exam prep: 150+ original practice questions with explanations, flashcards, domain drills, and progress tracking. Zero-dependency static app. → vuln-prioritization-toolkit Enriches CVEs with EPSS, CISA KEV, and NIST LEV scores to build a data-driven remediation queue. → vm-prompt-libraryAI A practitioner's prompt library for vulnerability management: structured, model-agnostic prompts for triage, communication, remediation, risk acceptance, and reporting. → patch-tuesday-analyzer Turns the MSRC API into an instant Patch Tuesday triage briefing. Zero-days first, noise last. → pytenable-automation-examples Production patterns for Tenable automation: agent health, streaming exports, SLA reporting. → kev-watch Daily CISA KEV diff alerter. New confirmed-exploited CVEs, straight to your security channel. → vm-metrics-dashboard ETL and Power BI starter kit for the KPIs that run a vulnerability management program. →

Writing

The missing link in vulnerability prioritization? Meet NIST's new LEV metric Article Monthly Patch Tuesday triage briefings Ongoing series Establishing meaningful KPIs and KRIs for vulnerability management Series

Toolbox

Vulnerability management

Tenable, ManageEngine, ServiceNow, SCCM, EPSS, CISA KEV, NIST LEV, patch management, SLA and KPI reporting, SOAR

AI & LLM tooling

Claude Code, Anthropic Claude API, on-device models (Transformers.js), Model Context Protocol (MCP), tool-use & RAG agents, prompt engineering

Automation & scripting

PowerShell, Python, Pandas, REST APIs, Terraform, Ansible

Data & reporting

Power BI, SQL, Power Query, KPI and KRI design, ETL

Platforms & infrastructure

Active Directory, Microsoft Azure, VMware, Windows Server, Linux, Hyper-V

Certifications & training

VMware: Sales & Technical Sales Professional
EMC: Storage Specialist · Avamar Backup Specialist
Cisco: CCNA / CCNP, Network Academy