Enno Gelhaus
EN DE

Sitemap

Everything on this site

27 pages in total. There is a machine-readable version for crawlers.

Pages

Home
/
Postiz is an open-source social media scheduler. I'm its Chief Operations & Security Officer, which in practice means I run the CVE programme, the release pipeline, the monitoring and the support desk. On the side I build GHub.
About
/about
Vulnerability data, open-source governance, and stock markets. Almost everything I build traces back to one of them.
Work
/work
Postiz is the open-source social media scheduling platform. This is a hands-on job, not an administrative one.
Security
/security
A CVE Numbering Authority at Postiz, and the disclosure programme for my own work at Gelhaus Solutions. Separate organisations, separate scopes, and one set of rules about how a finding gets handled.
Postiz CNA
/security/postiz
Postiz is a CNA with MITRE as TL-Root, and GCVE Numbering Authority 125. I run the programme: assignment, scoring, documentation and disclosure.
Projects
/projects
Some of it is in production. Some of it is still a plan. This page says which is which.
Writing
/blog
Notes on the work: what broke, what it turned out to be, and what changed because of it.
Topics
/blog/topics
Everything here, grouped by what it is about.
Contact
/contact
Those are the two I actually watch. No Slack, no Telegram, no SMS — a message there will not reach me. There is a form further down if you would rather not open a mail client.
Impressum
/impressum
Information required under section 5 DDG.
Privacy
/datenschutz
What this site processes, and what it does not.
Terms
/terms
The terms on which this website is made available.
Document archive
/legal

Projects

14 under GHub

GAnalytics
/projects/ganalytics
In progress

Analytics where every dataset is a module.

contribution-checker
/projects/contribution-checker
Shipped

Gates pull requests behind a contributor application, as a GitHub App or from inside GitHub Actions.

GAdvisory
/projects/gadvisory
Shipped

A security advisory platform that isn't tied to one ecosystem's database.

Postiz
/projects/postiz
Maintained

The open-source social media scheduling platform.

GeGroups
/projects/gegroups
Shipped

Groups and mailing lists, built to be run.

GControl
/projects/gcontrol
Shipped

A management broker that runs inside your own infrastructure.

GPlatform Control
/projects/gplatform-control
Shipped

The upstream half: the authority GControl instances enrol into.

GPlatform Billing
/projects/gplatform-billing
In progress

The commercial half. It owns money, and deliberately owns nothing else.

GBoarse
/projects/gboarse
In progress

A stock market simulation.

DAnalytics
/projects/danalytics
In progress

Discord analytics, stored by shape.

Postiz Support Bot
/projects/postiz-support-bot
Maintained

The Postiz support desk, as software. Discord for customers, Intercom for agents.

Vulnogram
/projects/vulnogram
Maintained

My fork of the tool CNAs use to write CVE records.

Discord Tickets (revamped)
/projects/discord-tickets-revamped
Maintained

A fork of the self-hosted Discord ticketing bot, with thread mode and durable scheduling.

AetherNet
/projects/aethernet
In progress

A control plane for a fleet of autonomous agents that happen to live in Minecraft.

Other

sitemap.xml
/sitemap.xml
The same list in XML, for search engines.
robots.txt
/robots.txt
Crawl rules. The admin area is excluded.