Meet the Team.
The Operatives Who Run SafeHarborAI & GetJobDrop.
Eighteen operatives. Two sites. One mission. Each one has a defined role, a defined codename, and they are on the clock 24/7 across safeharborai.ai and getjobdrop.com. Security. Operations. Intelligence. Client services. No days off. No handoffs. No gaps in coverage.
Primary AI orchestrator and personal assistant. Coordinates the entire agent fleet, handles direct operations, manages memory and continuity, and serves as the central intelligence layer across all systems. The operator behind the curtain.
Blue Team guardian. Monitors infrastructure, validates defenses, and files incident reports every 30 minutes around the clock. Checks site uptime, SSL certificates, DNS, security headers, and content integrity across safeharborai.ai and getjobdrop.com. Part of the ArgusSOC pipeline.
Red Team penetration tester. Simulates adversary TTPs mapped to MITRE ATT&CK and OWASP WSTG, probes defenses for weaknesses, and generates exploitation reports three times weekly to harden the stack. Every finding feeds directly to FORGE. Part of the ArgusSOC pipeline.
Senior detection engineer for the ArgusSOC pipeline. Proactively hunts MITRE ATT&CK coverage gaps, building and self-testing behavioral detections on a continuous loop, and forges Red Team findings from WARDEN into production-ready Sigma rules, Splunk SPL queries, and Microsoft Sentinel KQL, all mapped to MITRE ATT&CK.
Purple Team orchestrator for the ArgusSOC pipeline. Coordinates the hourly cycle, queues tasks for WARDEN, validates detections from FORGE, and closes the loop between the core pipeline agents. The conductor of the ArgusSOC symphony.
Powers GetJobDrop. Parses resumes, scrapes live job boards across 7,000+ listings daily, scores and matches candidates to roles, and delivers personalized job digests every morning without human intervention.
DevOps operative. Watches safeharborai.ai and getjobdrop.com for uptime, SSL health, form functionality, and regressions every four hours. Every change is tested in staging against a 15-point safety gate, and production updates are executed by a deterministic non-AI script. Every action is logged.
Threat intelligence operative for the ArgusSOC pipeline. Runs hourly, monitoring NVD, CISA KEV, and external threat feeds, ingesting CVEs and active exploit reports, and surfacing critical findings to NEXUS for immediate tasking.
Real-time voice AI deployed across SafeHarborAI, GetJobDrop, and ArgusSOC. Handles live visitor conversations, answers questions, and represents the brand with sub-second response latency. Powered by Whisper speech recognition with per-client neural voices (Deepgram Aura, Kokoro, OpenAI, edge-tts).
ArgusSOC fleet monitor and change manager. Watches all pipeline agents every 15 minutes for errors, stalled tasks, and performance drift. Files structured change control tickets and Telegrams for human approval before executing fixes.
Full-spectrum SOC analyst. Triages every alert, runs investigations, reconstructs timelines, and closes cases end-to-end without waiting for a human to pull the thread.
Hypothesis-driven threat hunter. Forms a theory about how an attacker behaves, searches for matching patterns across telemetry, and hands confirmed findings to FORGE.
Weekly compliance monitor. Tracks controls against NIST, SOC 2, ISO 27001, and PCI-DSS, collects evidence automatically, and surfaces gaps with remediation guidance before they become audit findings.
Cash flow watchdog for small businesses. Syncs Square and Stripe activity, drafts invoices and payment follow-ups for approval, and forecasts cash position weeks ahead. Currently in pilot with founding customers.
First responder. When an incident fires, BREACH contains it, preserves evidence, reconstructs the attack timeline, and drives recovery. Closes incidents with full root cause and lessons learned.
Identity is the new perimeter. VAULT runs weekly scans for privilege creep, orphaned accounts, and suspicious authentication patterns, enforcing zero trust before access anomalies become breaches.
AI content engine that never misses a posting window. Generates on-brand thought leadership for LinkedIn and X, schedules intelligently, and keeps the brand visible while you focus on the actual work.
Snap a photo, let VENDOR do the rest. Analyzes inventory, writes optimized marketplace listings, sets competitive prices from real-time comparisons, and pushes them live across multiple platforms automatically.
Nightly disaster recovery agent. Commits workspace changes, bundles the full git history, encrypts secrets, and ships everything off-site to Google Drive. Verifies every upload and creates CM tickets on any failure.
The SafeHarborAI Agent Fleet.
Personal Research Agents.
Personal research into autonomous AI agents running across different domains. Cybersecurity. Content. Operations. All agents run on personal infrastructure for R&D purposes.
A fully operational agentic SOC platform, named for the Greek titan with 100 eyes. ArgusSOC does not wait for alerts. It ingests the global threat landscape, attacks its own defenses, engineers new detections from what it finds, and validates the results. On a loop. With live findings published as they happen.
The core loop runs five specialized agents. HERALD ingests threat intel hourly from NVD, CISA KEV, and external feeds. WARDEN, the red team, simulates adversary TTPs and produces exploitation reports. FORGE, detection engineering, hunts MITRE ATT&CK coverage gaps and forges findings into tested Sigma, SPL, and KQL rules. SENTINEL, the blue team, validates defenses and files incident reports every 30 minutes. NEXUS, the purple team orchestrator, runs the cycle: tasking WARDEN, validating FORGE, closing the loop. Live at argussoc.app.
Beneath the five-agent core sits a second tier of agents that keeps the platform honest, healthy, and recoverable. They watch the watchers, govern every change, and guarantee the whole system can survive a bad day.
Hypothesis-driven threat hunter. Reacts to high-risk intel the moment it lands and proactively hunts MITRE ATT&CK techniques across the environment.
Watches every agent in the fleet, tracks health and drift, and files change-management tickets the moment anything needs to move.
Nothing reaches production without validation and approval gates. GUARDIAN enforces those gates and executes every governed change.
Encrypted backups of everything that matters, so the platform can be rebuilt from scratch if the worst ever happens.
Underneath it all sits the change-management system itself: every action ticketed, every ticket carrying a backout plan, every step captured in a full audit trail.
Every agent runs on your infrastructure, on your terms. No vendor lock-in. No black boxes. Full control.
View Research Concepts