Curtis Collicutt

About Curtis

Curtis is a technologist who works to make systems safer and easier to use. He adopts a socio-technical approach to complex challenges via human-centred solutions. Throughout his career, which has spanned work with university libraries, start-ups and enterprises, he has been a trusted advisor to customers and stakeholders. He is constantly learning and growing, and through organisations like TAICO, he helps others do the same.

Books

Technical books and resources for developers and security professionals.

The Safety Continuum

From Dry-Run to Digital Twins: A Guide to Building Safer Systems

Book One - Mechanics of Safety

This guidebook is the first in a series that aims to foster empathy among those responsible for operating complex systems. We present a Safety Continuum that allows readers to explore the potential solutions they can implement to make their day-to-day work safer and more predictable. While we, as an industry, have invested enormous effort into system uptime and availability, we have often neglected safety, the actual experience of humans holding everything together at 3AM, working with brittle and dangerous tools. This initial volume, and the ones that follow, work towards making systems safety a primary consideration. Now is the best time in computing history for operators to design their own fate.

95 pages 20,000 words 8.5 x 11 PDF


Read Sample

Software

Open source tools and commercial software for developers and operators.

NegaLog

NegaLog

Find the logs that should exist but don't

Monday morning. You walk in to find the payment processing job stopped running Friday at 6pm. No errors. No alerts. It just...stopped. Three days of orders sitting unprocessed. $47,000 in delayed revenue. Angry customers. A manager asking "how did no one notice?"

The job didn't fail - it silently disappeared. Your monitoring watched for errors, but there were none. The absence of expected logs went undetected.

This is why NegaLog exists. Instead of watching for what went wrong, it watches for what should have happened but didn't.

Traditional log analysis tools search for patterns that exist. NegaLog inverts the paradigm: define what logs should exist, and it reports what's missing. Detect incomplete transactions, monitor scheduled jobs, and verify error handling - all by identifying the absence of expected log entries. Open source CLI tool written in Go with support for sequence detection, periodic monitoring, and conditional absence detection across multiple log files.

NegaLog supports commercial plugins for production use. See NegaLog Watch for continuous monitoring.

raillock

raillock

A cybersecurity CLI tool and Python library for checksumming Model Context Protocol tools and securing your agents against prompt injection attacks.


Pure OSS - MIT License - PRs welcome, free to fork

Go App Template Skeleton

Go App Template Skeleton

A generic golang application skeleton providing a foundation for building API servers with web interfaces and command-line tools.


Pure OSS - MIT License - PRs welcome, free to fork

spellerweb

spellerweb

A CLI website spell checker.


Pure OSS - MIT License - PRs welcome, free to fork

MCP Makefile Server

A Model Context Protocol server that provides makefile target inspection and execution capabilities for AI assistants.


Pure OSS - MIT License - PRs welcome, free to fork

rmrf

rmrf

A safer version of `rm -rf`; designed for saving weekends


Pure OSS - MIT License - PRs welcome, free to fork

plothole

plothole

Test your AI-assisted code for missing implementations, TODOs, and other AI generated artifacts


Pure OSS - MIT License - PRs welcome, free to fork

Volunteer

Non-profit organizations and volunteer work I'm involved with.

TAICO

TAICO

I'm a board member of the Toronto AI and Cybersecurity Organization (TAICO), a non-profit organization dedicated to improving the state of artificial intelligence and cybersecurity in Canada.

Content

Content I create, like videos, blog posts, and more.

YouTube

YouTube

This is where I publish videos about technology, cybersecurity, discuss my blog posts, and more.

Server As Code Dot Com

Server As Code Dot Com

A techno-blog for our techno-times. This is where I write about specific applications of technology.

TIDAL SERIES

TIDAL SERIES

TIDAL SERIES is my newsletter where I tackle advanced ideas about computing, cybersecurity, artificial intelligence, financial markets, and more.

Social

Social and professional links.

X (aka Twitter)

X (aka Twitter)

Connect with me on X!

LinkedIn

LinkedIn

Connect with me on LinkedIn!

GitHub

GitHub

Now is one of the best times ever to write software, to solve problems with your own code. A non-trivial part of cybersecurity is engineering, and we can now build better tools than ever before.