guin@norrath:~$ whoami
securing information systems · defending against AI-accelerated attacks · automating risk ops
click anything to earn XP & level up your character
I Projects 18 artifacts
relics & artifacts forged by the dev — click one to inspect
II Infrastructure 6 nodes
the home stronghold — every node self-hosted
Home-Built WAF
ServWall — a network web application firewall written in Go. Sits in line between clients and the origin, inspecting every request: declarative YAML rules, per-IP rate limiting, regex attack-pattern inspection, and an opt-in self-hosted local-AI verdict layer.
Local AI
Self-hosted LLM services, no cloud.
Home Assistant
Home automation & monitoring.
Gitea
Self-hosted Git server & CI/CD.
Virtual Machines
Multi-OS virtualization layer.
Databases
Data services & persistence.
III Cyber Risk prestige codex
A decade-plus of third-party cyber risk across diverse vendor ecosystems. Leading assessments, continuous monitoring, and AI risk evaluations from the front lines.
Leadership Capabilities
Leading cross-functional risk initiatives, mentoring junior risk analysts, presenting to executive leadership, and driving organizational maturity in third-party risk practices.
Third Party Risk Assessments
End-to-end risk assessments of third-party vendors — evaluating security posture, identifying gaps, and delivering remediation roadmaps aligned to NIST and ISO frameworks.
Control Maturity
Maturing vendor security controls across the full lifecycle — from onboarding to ongoing reassessment, keeping continuous alignment with organizational risk tolerance.
Cyber Event Response
Coordinating incident response for third-party security events — detection through containment, notification, and post-incident remediation with full vendor accountability.
Continuous Third Party Monitoring
Continuous monitoring programs tracking vendor security posture in real time — security ratings, breach alerts, compliance drift, and automated risk scoring.
Third Party Inventory
Comprehensive third-party inventories with risk categorization, data-flow mapping, contract tracking, and automated refresh cycles keeping the vendor ecosystem fully visible.
Third Party AI Assessments
Specialized assessments for AI/ML vendors and AI-powered services — model risk, data governance, algorithmic bias, and AI-specific security controls in the third-party lifecycle.
IV EverQuest Ecosystem server: online
preserving a beloved MMORPG, one quest at a time
EQEmulator Server
In 2006, a team of enthusiasts reverse-engineered EverQuest's server/client protocol to preserve a beloved game. I joined in 2009, contributing Perl, Lua, SQL, and RPG development. I host a personal instance for testing new features, and I'm building a 'Tour-de-Norrath' historical museum of the game.
Quest Development
EverQuest quests were nothing like modern MMORPGs — you won't find 'go kill 10 skeletons' here. They were impactful, meaningful, and often incredibly long. Rebuilding them has been a massive effort. We've even interviewed former EverQuest developers, artists, and producers to restore quests that are old, broken, or lost to time.
V About character sheet
the traveler behind the codex
Nic Weilbacher
Systems Engineer & DevOps practitioner with a deep passion for building reliable infrastructure, automating operations, and securing networks. Thirteen years in cybersecurity — ten specializing in third-party cyber risk, plus three in vulnerability management and SOC. I bring a security-first mindset to everything I build, specializing in multi-service home datacenters, Kubernetes orchestration, and automation that turns manual toil into elegant solutions.
My work centers on Python automation, Third Party Cyber Risk, AI and Model Risk Management and AI-assisted system administration. I build network monitoring platforms with CIS compliance reporting, vulnerability assessment tools with LLM-driven analysis, and distributed task processing. I'm passionate about self-hosted services, private cloud infrastructure, and open-source tooling.
Off the clock, I'm tinkering — local AI models, RPG engines, retro-themed websites, and the occasional rabbit hole. I love learning across a broad range of topics and turning curious ideas into real, working projects.