Source for moaaztaha.com, the professional site of security engineer Moaaz Taha.
Contact: moaaz@moaaztaha.com
The site is deliberately small: three editorial pages, no CMS, no database, no analytics and no client-side form. It publishes a concise biography, selected public work and a source-linked archive of five CVEs.
Requires Node.js 22.13 or newer.
npm ci
npm run devOpen http://localhost:3000.
npm run lint
npm test
npm audit --omit=dev --audit-level=highThe test build checks the rendered pages, machine-readable identity contract, metadata, security headers and 404 response. GitHub Actions runs the same checks for each push and pull request.
/— work, selected research and earlier roles/about— interests, milestones and contact/research— five CVEs with vendor, NVD and Exploit-DB sources/identity.json— structured public identity record/moaaz-taha.vcf— downloadable contact card/.well-known/webfinger— canonical mailbox-to-profile discovery/.well-known/security.txt— security contact
Claims on the site are limited to material that can be tied to a named public source. The design is text-led, uses system fonts and has no third-party runtime dependencies.