# Alen Krga

> Alen Krga is a Senior IT Security & Resilience Engineer based in Croatia. His expertise lies where security engineering meets risk and resilience: threat-informed risk assessment, detection engineering and investigation, vulnerability and exposure management, and digital operational resilience. He builds free cybersecurity apps and writes about cybersecurity.

## Expertise

- Threat-informed risk: MITRE ATT&CK, threat modelling, attack paths, control gaps and practical mitigations
- Detection and investigation: detection design and tuning, log and evidence analysis, incident timelines and scope
- Vulnerability and exposure: risk-based prioritisation using CVSS, EPSS, CISA KEV, exposure and business impact
- Digital operational resilience: disaster recovery, business continuity, critical dependencies, tabletop exercises
- Governance and controls: NIST SP 800-53, second-line cyber risk, policy exceptions, audit evidence
- Security engineering and automation: Python, C#, JavaScript, SQL, REST APIs, AI-assisted security tooling (prompt injection and data-leakage aware)

## Free security apps

- [MailTrace](https://alenkrga.com/apps/mailtrace/): Email header analyzer for email security and phishing analysis
- [VulnSignal](https://alenkrga.com/apps/vulnsignal/): Vulnerability intelligence combining CVE, CVSS, EPSS and CISA KEV for risk-based prioritisation
- [Cybersec](https://alenkrga.com/apps/cybersec/): Check links, domains and emails against public phishing, malware and scam lists and DNS security filters
- [ReconDeck](https://alenkrga.com/apps/recondeck/): 20 free browser-based security tools (IP exposure, DNS and email security, SSL, CVE intelligence, password breach checks)
- [CyberScroll](https://alenkrga.com/apps/cyberscroll/): A private, account-free cybersecurity news reader
- [All apps](https://alenkrga.com/apps/)

## Writing

- [Cybersecurity blog](https://alenkrga.com/blog/): articles on AI agent security, phishing, encryption, privacy and cyber risk

## Credentials

- CompTIA Security Analytics Professional (CSAP), CompTIA CySA+, CompTIA Security+, CompTIA Network+
- Verification: https://www.credly.com/users/alen-krga/badges

## Contact

- LinkedIn: https://www.linkedin.com/in/alenkrga/