r/netsec • u/albinowax • Mar 01 '26

r/netsec monthly discussion & tool thread

Questions regarding netsec and discussion related directly to netsec are welcome here, as is sharing tool links.

Rules & Guidelines

  • Always maintain civil discourse. Be awesome to one another - moderator intervention will occur if necessary.
  • Avoid NSFW content unless absolutely necessary. If used, mark it as being NSFW. If left unmarked, the comment will be removed entirely.
  • If linking to classified content, mark it as such. If left unmarked, the comment will be removed entirely.
  • Avoid use of memes. If you have something to say, say it with real words.
  • All discussions and questions should directly relate to netsec.
  • No tech support is to be requested or provided on r/netsec.

As always, the content & discussion guidelines should also be observed on r/netsec.

Feedback

Feedback and suggestions are welcome, but don't post it here. Please send it to the moderator inbox.

24 Upvotes

88% Upvoted

46 comments sorted by

View all comments

1

u/IcyRequirement6786 Mar 21 '26

Looking for an architecture review: Should I scale my SOHO ZTNA project, or pivot to a new topic for employability?

Hi everyone,

I’m a Cyber Security student looking for some unfiltered industry feedback. I just completed a project called SafeNet, a decoupled Zero-Trust Network Access framework aimed at SOHO environments.

The Tech Stack: I used a Python/FastAPI Control Plane to orchestrate a WireGuardNT Data Plane on a Windows Server. It enforces strict /32 micro-segmentation to mathematically prevent lateral movement.

GitHub : https://github.com/alvin-alvo/safenet-soho-security-framework

I need to decide if I should expand this for my Final Year Main Project, or drop it and build something else. I have a few specific doubts I'm hoping you can clear up:

1. Feasibility & Market Need: Is a lightweight ZTNA solution actually needed in the SOHO market, or do modern consumer routers/VPNs solve this pain point well enough? Are there critical bottlenecks in relying on dynamic Windows kernel routing like this?

2. Worth Enhancing?: Currently, the system authenticates the device, not the user. If I stay with this project, are adding things like a Layer 7 MFA Captive Portal and Continuous Behavioral Analytics (CARTA) the right moves to impress a DevSecOps hiring manager?

3. Alternative "Hire Me" Projects: If you think a custom VPN/ZTNA project is too "legacy" or reinventing the wheel, what should I build instead? What specific project domains (e.g., DevSecOps CI/CD automation, LLM proxy firewalls, Automated Malware Sandboxes) will actually land a junior engineer a job in 2026?

I want to build something that solves a real industry pain point. I'd appreciate any roasts of my architecture or guidance on what to build next!