01 / ABOUT

Marco
Fornari

I build software
and study how to defend networks and systems.

Profile

Hi, I'm Marco: a junior developer with a passion for networks, systems and cybersecurity.

I graduated from ITS in Industrial Software Development with 110/110 cum laude. In 2026 I built Overguard, an anti-phishing platform for small businesses: the first project where I brought development and security together.

Looking for

Network & systems administratororCybersecurity analyst

Today I'm a developer and I want to grow in this direction, in a team where my development background helps and I can learn on the job. Meanwhile, I'm preparing for the CEH certification.

Let's talk

02 / EXPERIENCE — SYSTEM HISTORY

StoryCodeSystemSecurity

FEB 2026 — JUL 2026

Overside Srl

Junior Developer · Security Engineering

I built Overguard, a platform that helps small businesses spot phishing emails and Business Email Compromise fraud. It was also my ITS thesis project.

What I did

  • Automated analysis of email headers, sender, domain and links, with extraction of indicators of compromise (IoCs).
  • Risk scoring across 5 threat intelligence sources (VirusTotal, AlienVault OTX, URLScan.io, Hybrid Analysis, Google Safe Browsing), with caching and fallback when a source doesn't respond.
  • DLP module that checks outgoing emails for sensitive content.
  • .NET 10 backend with JWT-secured REST APIs, PostgreSQL and Docker deployment on Linux; Chrome and Thunderbird extensions connected to the backend.

What I learned

How to design a complete system, from the database to the browser extensions, and to ask early on what can go wrong: a source that stops responding, an API rate limit, data leaving when it shouldn't.

Stack

  • C#
  • .NET 10
  • ASP.NET Core
  • PostgreSQL
  • REST API
  • JWT
  • Docker
  • Linux
  • Git

APR 2025 — JAN 2026

Levante Yachts Srl

Junior Developer

I worked on the company portal, on both frontend and backend.

What I did

  • Automated content publishing by connecting WordPress and Google Sheets through REST APIs.
  • Managed the MySQL database, writing SQL queries to verify and clean data.
  • Built pages and features in HTML, CSS, JavaScript and PHP.

What I learned

How to work on a live system, where every change touches real data and content.

Stack

  • HTML
  • CSS
  • JavaScript
  • PHP
  • MySQL
  • WordPress API
  • Google Sheets API

Projects

2026

Astro · Netlify

This portfolio

The site you're reading: I built it with security as the starting point, not an add-on.

What I did

  • Static site, to keep the attack surface as small as possible.
  • HTTP security headers (CSP, HSTS, Permissions-Policy), rated A+ on securityheaders.com.
  • Code scanning with Semgrep and custom rules, dependency checks with npm audit.

What I learned

To apply what I'd studied to a project of my own: hardening, static analysis and triaging the findings.

Education & Certifications

IN PROGRESS — 2026

CEH — Certified Ethical Hacker

EC-Council

Currently preparing: ethical hacking, vulnerabilities, network and system security.

2024 — 2026

ITS Smart Academy

INDUSTRIAL SOFTWARE DEVELOPER
EQF LEVEL 5 · 110/110 CUM LAUDE

Two-year higher technical program in industrial software development.

2024

Università Politecnica delle Marche

Cyber Risk & Data Protection

Postgraduate course (25 ECTS): GDPR, risk management, network and software security.

2024

Google Cybersecurity Certificate

Foundations & Operations

Python, Linux, SQL, SIEM, IDS, risk assessment, threat identification, security controls.

2021

Università La Sapienza di Roma

Arti e Scienze dello Spettacolo

Bachelor's degree: history and languages of film, theatre and audiovisual media; critical analysis, writing and communication.

03 / SKILLS — STACK

The stack I use
to build and defend.

01 / 03

Software Developer

27 tools

Clean Architecture · REST API · JWT · Browser extensions · API automation

02 / 03

Artificial intelligence

5 tools

AI-assisted development · Prompt engineering · Local LLMs · Critical review of generated code

03 / 03

Cybersecurity

9 tools

Phishing & BEC detection · Threat intelligence · IoC correlation · Risk scoring · DLP · HTTP hardening · SAST / SCA · Log analysis · SIEM · IDS · Risk assessment · GDPR

04 / CONTACT