Skip to content
Justin White

Work

Software I build: platforms, tools, and this site.

SubnetSleuth's physical topology map of a sample campus: an edge firewall and WAN router above a core switch pair, with floor, server and warehouse switches below and access points under them Work

SubnetSleuth: inventory and map a network you inherit

A Windows desktop app and command-line tool for taking stock of a network you are now responsible for but did not build. It reads the network's own devices over SNMP, read-only, and works out what is there and how it is wired: devices, links, subnets, VLANs and every host, with a topology map, a deep Nmap scan of any address, and exports for the team.
Guitar Trainer playing Pachelbel’s Canon, strummed: the six strings as lanes of tab with fret numbers and strum arrows, and a fretboard underneath showing where the fingers go Work

Guitar Trainer: a guitar and bass teacher in the browser

Piano Trainer's sibling for electric, acoustic and bass guitar. Songs scroll along the strings as tab, it listens through a cable or a microphone, and two 48-day courses take you from holding the pick to barre chords, the blues, walking bass and a graduation recital.
The Piano Trainer player, with orange right-hand and violet left-hand notes falling onto a keyboard above a strip of sheet music Work

Piano Trainer: a piano teacher in the browser that listens while you play

A falling-notes piano app with a 48-day spoken course. It hears a real piano through a cable or a microphone, keeps you on each exercise until it's 100% right, and steps in when you're struggling.
The DeepReview deep-dive pipeline (subject to 40+ OSINT collectors to multi-lens synthesis to adversarial verify to an A-F grade and breach-risk profile) with eight sub-scores Work

DeepReview: passive-OSINT vendor and consultant security intelligence

A self-hosted, multi-user passive-OSINT platform that profiles the third parties you depend on from public information only, running a multi-phase agentic collect/synthesize/verify pipeline into an A-F security grade and an executive breach-risk profile. The outward-facing inverse of HouseGRC, for authorized vendor-risk assessment and red-team / CTF reconnaissance.
A module map of the HouseGRC GRC platform (frameworks, controls, risk, audits, vendor risk, dashboards) over a Python/Reflex stack Work

HouseGRC: a self-hosted, multi-tenant GRC platform, built solo

A solo-built, owner-controlled GRC platform that runs a whole security and compliance programme from one encrypted, multi-tenant app, from frameworks, risk and audits through access reviews, incident response, privacy, AI governance and the external attack surface, with central fail-closed tenant scoping.
A radial diagram of GYST, with a JARVIS assistant at the centre surrounded by inventory, chores, food, notes, appointments, and PWA tiles Work

GYST: a self-hosted household-ops PWA with an agentic assistant

A single-container household-operations app where you photograph a shelf to inventory it and a 40+-tool agentic loop can drive everything you can.
The jlwhite.ca homepage: "Things I build, grow & break." above the latest Field Notes Work

Building jlwhite.ca: a static site, an email fix, and DNSSEC

A boring-by-design Astro site on Cloudflare, and the DNS, email-authentication and DNSSEC work behind it.