Skip to content
View rezmoss's full-sized avatar
🎯
Focusing
🎯
Focusing

Sponsors

@pbxdomanalytics

Sponsoring

@muesli
@wesm
@FiloSottile
@mudler
@mvdan
@gaocegege
@jesseduffield
@rudrankriyam

Organizations

@AikidoSec @cloudaidnet

Block or report rezmoss

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don't include any personal information such as legal names or email addresses. Markdown supported. This note will be visible to only you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
rezmoss/README.md

Twitter LinkedIn Website AWS

I'm a developer and system builder. Currently leading VM scanning at @AikidoSec. Founder of CloudAid. I work primarily in Go, Node.js, and AWS.

I build tools, write about what I learn, and maintain open-source projects in the cloud security and infrastructure space.


Recent Projects

Project What it does
sbomlyze SBOM analysis & diff for supply-chain security
axios4go Axios-inspired HTTP client for Go
go-is-disposable-email A high-performance Go package for detecting disposable/temporary email addresses
go-cloudip Fast cloud provider IP detection for Go
simple-load-balancer HTTP load balancer in Go using only stdlib
cloud-provider-ip-addresses Daily-updated IP ranges for AWS, GCP, Azure, Cloudflare
awesome-security-pipeline Curated security tools organized by CI/CD stage
network-vulnerability-scanner Network vuln scanner built from scratch in Go

Recent Writing

More at rezmoss.com/blog

Book

I wrote Go at Scale: Patterns for Professional Development on Go patterns covering concurrency, microservices, event-driven architecture, and more. Companion code is here

Pinned Loading

  1. axios4go axios4go Public

    A Go HTTP client library inspired by Axios, providing a simple and intuitive API for making HTTP requests with features like interceptors, JSON handling, configurable instances, and automatic retries

    Go 30 9

  2. cloud-provider-ip-addresses cloud-provider-ip-addresses Public

    A daily-updated repository providing IP address ranges for major cloud providers (AWS, Google Cloud, Azure, Cloudflare) in multiple formats with ready-to-use Nginx and Apache configurations.

    21 6

  3. go-at-scale go-at-scale Public

    📘 Companion code for "Go at Scale" 528 pages of production-grade Go patterns. Concurrency, microservices, event-driven architecture & more. Available on Amazon.

    Go 31 2

  4. simple-load-balancer simple-load-balancer Public

    HTTP load balancer in Go using only the standard library, round-robin, health checks, weighted routing. Great for learning Go networking internals

    Go 46 7

  5. sbomlyze sbomlyze Public

    SBOM diff & analysis tool for software supply-chain security, integrity drift detection, and CI/CD enforcement

    Go 9

  6. awesome-security-pipeline awesome-security-pipeline Public

    🔐 A curated list of open-source security tools organized by CI/CD pipeline stage. Covers secrets detection, SBOM, SAST, SCA, IaC security, container scanning, Kubernetes security & more. Actively m…

    5