Alexander
North
Founder | Cybersecurity Professional | AI-Assisted Development & Governance
ABOUT
Solo founder and cybersecurity practitioner. My path has moved through different environments, but the constant has been building systems and understanding how they work. I design software and tools to solve real problems, then refine them through direct use. LabList started as a personal solution for tracking hands-on work and continues to evolve through that process.
I build web applications, think in systems, and treat security as foundational rather than optional. I enjoy analyzing risk and evaluating mitigations across supply chain, architecture, third-party trust boundaries, and the governance frameworks that hold them together. I'm targeting roles in GRC, AI governance, and compliance where this thinking compounds.
Always building. Always learning. Always improving.
BACKGROUND
PROJECTS
LabList: a living technical portfolio platform
Entry-level technical roles keep asking for years of experience, which a flat resume can claim but not prove. The alternatives are a bland, easily forgotten GitHub repo, or buying a domain and building a static portfolio yourself. LabList streamlines that. It unifies projects, certifications, and labs in one professional portfolio that validates each resume point and stays easy to maintain, with some entries kept current automatically, so people can focus on what moves the needle, building real experience. LabList is the living proof of experience behind a resume. I built the full stack solo on Next.js and Supabase, from auth and Stripe billing to a guided writeup wizard and a defense-in-depth security model.
02/04/2026 — ongoing
TGF — The Governance Framework for AI-Assisted Development
A Claude Code plugin that turns senior DevSecOps judgment into enforceable rules grounded in primary sources. Every rule cites a sub-rule identifier from OWASP ASVS, NIST, ISO, MITRE, or an RFC. Built for developers using AI heavily who want their work to actually meet industry standards by default.
05/04/2026 — ongoing
CERTS
ACTIVITY LOG
A Claude Code plugin that turns senior DevSecOps judgment into enforceable rules grounded in primary sources. Every rule cites a sub-rule identifier from OWASP ASVS, NIST, ISO, MITRE, or an RFC. Built for developers using AI heavily who want their work to actually meet industry standards by default.
View full writeup →CompTIA — active
View certification →
Entry-level technical roles keep asking for years of experience, which a flat resume can claim but not prove. The alternatives are a bland, easily forgotten GitHub repo, or buying a domain and building a static portfolio yourself. LabList streamlines that. It unifies projects, certifications, and labs in one professional portfolio that validates each resume point and stays easy to maintain, with some entries kept current automatically, so people can focus on what moves the needle, building real experience. LabList is the living proof of experience behind a resume. I built the full stack solo on Next.js and Supabase, from auth and Stripe billing to a guided writeup wizard and a defense-in-depth security model.
View full writeup →Linux Professional Institute (LPI) — active
View certification →
ISC2 — active
View certification →
It’s been a busy semester, but it’s finally wrapped up. This semester, I earned my ITIL 4 Foundation certification and wrapped up courses in Digital Forensics and Cryptography. My biggest challenge, though, came from the two Database Management courses. At first, MySQL felt like my nemesis, but once everything started to click, I realized how powerful and even enjoyable it could be....
View full writeup →
My name is Alex, and I am a current student at Western Governors University, working on my Bachelor’s degree in Cybersecurity. I’ve been on this journey for a little over a year now. One thing I’ve learned about the industry is that cybersecurity and certifications seem to be synonymous with one another. Certifications are a great way to evaluate and demonstrate your level of knowledge on a specific topic. It provides a rewarding feeling and allows you to display your hard work for others to see....
View full writeup →
PeopleCert — active
View certification →
Cybersecurity is a massive field — tons of niches, each with its own tools and skills. I’m a student working toward my Cybersecurity and Information Assurance degree at Western Governors University, picking up certs like A+, Net+, and Sec+ along the way (and aiming for more!). The theory’s great, but I needed a way to get hands-on experience to really lock it in. That’s where a homelab comes in — a scalable setup that mimics a small enterprise network. After some research, I went with EVE-NG Community Edition: it’s free, flexible, and has a solid community behind it. Everything used in the guide is free and just requires your time to set up. Let’s get building!...
View full writeup →