I'm a cybersecurity researcher and builder in Latvia. I build privacy tools for AI, little interfaces with personality, and security research for industrial systems.
Website & CV · X / @heinrihs_s · LinkedIn · securIT · Play with a dot →
Send context to the model. Keep identities local.
A self-hosted privacy gateway for AI workflows. Detect sensitive values, apply policy, send scoped tokens to the model, and restore approved values in the reply. Some requests belong on a local model; others should be blocked before they leave.
Explore the code · Try the local playground · How it works
Watch what the model actually sees
The demo uses synthetic data and a deterministic mock provider. Cloakspan is an alpha for local evaluation and synthetic-data pilots.
Give your assistant a little desk space.
An open-source MCP and Home Assistant bridge for assistant displays, including e-ink. Four switchable companions, animated thinking states, and readable replies.
Try the interactive demo → · Build your own · Explore the code
Meet the dots: Artist, Curious, Bookish & Cool
Open the demo, switch companions, pick an example and replay the thinking state. A browser preview of the idea; the repository contains the bridge and rendering tools.
My security work focuses on SCADA/ICS, protocol-aware detection and AI-agent safety. I like small, reproducible artifacts and explanations a tired human can still review.
| Disclosure | What I found |
|---|---|
| CVE-2026-62972 · BACnet Stack | Out-of-bounds read in the lighting command decoder. Credited as reporter. |
| OpENer #576 · EtherNet/IP | Independent report merged into the response-side buffer overflow investigation, with AFL++ / ASAN reproduction and capacity guards. |
- SCADA Agent SafetyBench — simulation-only evaluation of AI assistants in SCADA / IEC-104 workflows.
- CTF writeups — challenge notes, including the SANS European Championship 2026.
Open the rest of the lab notebook
- IEC-104 Threat Scenario Generator — synthetic scenarios and offline artifacts for IDS evaluation.
- IEC-104 Rulebook — YAML monitoring rules and baseline templates.
- Zeek IEC-104 Lab — synthetic records and helper scripts for detection experiments.
- LogSpotAI — a small OpenAI-assisted log review experiment.
Ideas and feedback are welcome in each project's issues. You can also find me on X.