open to new projects right nowworking remotely from Samsun
An eye for detail
I write GLPI plugins that find the one wrong dot among thousands of records before a human eye does, and turn IT regulation and security requirements into portable tools that score themselves.
Selected work.
Writing.
3 posts · GLPI, risk, open sourceOne codebase for GLPI 11 and 12: what I watch out for
Shipping the same plugin to two major versions in one package is possible, but a few traps are worth knowing in advance.
From a regulation clause to a risk score: turning SPK BSY into code
How does a regulatory text become a system that produces scores by itself? The path I followed in Pusula.
Catching a ticket pile-up with statistics: how Surge detects
Thirty "no internet" tickets arriving within the same minutes are one incident. How does Surge know?
About.
Samsun · remote · 2026I turn GLPI into a platform that scores an organisation's own rules by itself.
I am a software developer working remotely from Samsun, Türkiye. Since 2026 I have been building enterprise GLPI plugins with Sayru Teknoloji: risk management, reporting, policy lifecycle, Active Directory auditing and database tooling.
The core of my work is turning the SPK BSY communiqué (the Turkish capital-markets IT regulation) and information-security requirements into tools that are configurable from the UI, portable and self-scoring. One pair of hands from requirement to package: design, code, test install, deployment.
In my own time, open source: Surge and create-glpi-plugin are on GitHub. On the security side I keep going with Cisco and penetration-testing training.
Development
- PHP 8
- GLPI plugin API
- Twig
- JavaScript
- MariaDB · MySQL
- Node.js
Domain
- IT risk management
- SPK BSY
- ISO 27001
- KVKK / GDPR
- Active Directory · LDAP
- Information security
Tools
- Linux
- Git · GitHub Actions
- Docker
- LibreOffice automation
- AI-assisted development
In numbers.
June → November 2026 · real dataFrom one plugin to eighteen in six months
Cumulative plugins delivered for Sayru. Dots mark the moments known for certain.
Minor releases per plugin
Every delivery bumps the version; a long bar means frequent iteration.
One code base, two major versions
Which plugin runs on which GLPI version.
Quality in numbers
Tests that run before a package reaches a customer, and the content the plugins carry.
Experience.
2025 → todaySoftware Developer · GLPI Plugin & IT Risk Automation · Sayru Teknoloji
I build the GLPI plugins of the Sayru-Yön product family end to end: requirements, design, code, test installations, packaging and deployment.
- 18 enterprise plugins: risk management, reporting, policy lifecycle, AD auditing, database tools, budgeting, continuity exercises, workflow
- One codebase for GLPI 11 and 12, verified on a test installation per version
- Turning SPK BSY, ISO 27001 and KVKK requirements into rule and scoring engines
- The company web site and product documentation
Surge · and create-glpi-plugin
Two open-source tools for the GLPI community: Surge, which turns ticket bursts into a major incident, and a CLI that scaffolds a plugin with one command. Live on GitHub and npm.
SureLog SIEM · corporate web site
A corporate site for a SIEM product: content management, multilingual structure, form and e-mail integration.
NEXORA ESM · and RiskOps
Two applications I built on my own: NEXORA ESM, which combines service management, a CMDB and a risk module (PHP 8.3, SQLite), and RiskOps, built around a 5×5 risk matrix (PHP 8.3, MariaDB). From scratch, with no framework or CDN dependencies.
Certificates.
5 certificates · security and networkingShall we build something together?
A GLPI plugin, a risk process, or just an idea. Write to me; I usually reply the same day.