kiran@parajuli:~$
// live connections · Biratnagar, Nepal
~/whoami — zsh
$ whoami
open to security engagements

Kiran Parajuli

>

Cybersecurity engineer and CEO of Eterosoft Technologies in Biratnagar, Nepal. I work across SOC operations, threat detection, incident response and secure software development.

./run-footprint-scan
cd portfoliocat resume
# attack surface

Where I spend my time

ls ./skills →
# always vigilant

Stay vigilant. Ship secure.

Security is a habit practised every day, from the SOC console to the code review.

# latest posts

Notes from the field

ls ./blog --all →
[privacy]2026-01-01 · 5 min

How browser fingerprinting identifies you without cookies

The signals behind the footprint scanner on this site, and what you can do to reduce them.

#privacy#fingerprinting
read article →
[appsec]2026-01-01 · 7 min

Applying the OWASP Top 10 in a small team

How a small development team can cover the most common web risks without a dedicated security department.

#owasp#ssdlc
read article →
[soc]2026-01-01 · 6 min

Triaging a suspicious sign-in alert

A repeatable checklist for deciding whether an unusual sign-in is benign, risky or a confirmed compromise.

#soc#sentinel#triage
read article →
# about me

Security engineer and technology leader

Focused on strengthening organizational security, improving threat visibility, developing security-aware teams, and implementing practical security controls.

cat about.md →
01SOC & detectionTier 2 triage, investigation and threat hunting.
02Security engineeringVulnerability assessment and secure SDLC.
03GRCRisk, policy and operational resilience.
04LeadershipCEO at Eterosoft Technologies.
# featured projects

Things I've built and run

cd portfolio →
Company · CEO & Security Engineer

Eterosoft Technologies

Technology company in Biratnagar, Nepal, where I lead strategy, delivery and security engineering.

Secure SDLCArchitectureRisk assessment
details →
Security tool · Live demo

Digital Footprint Scanner

In-browser demo that shows the fingerprinting signals any website can read.

TypeScriptWeb APIsWeb Crypto
details →
Product · Co-founder

Our Krishi

Agriculture platform built with Next.js, Node.js and Flutter.

Next.jsNode.jsFlutter
details →
# core skills

The toolkit

ls ./skills →
SplunkMicrosoft SentinelWazuhElastic SecurityWiresharkNmapBurp SuiteOWASP ZAPNessusVolatilityCrowdStrike FalconMITRE ATT&CK
Alert triageIncident responseThreat huntingDetection engineeringIAMISO/IEC 27001NIST CSFPythonBashPowerShellDockerLinux
# digital footprint scanner

What does your browser say about you?

A live, in-browser demo of the signals any website can read without asking.

./footprint --run
# contact

Let's secure what you're building.

./contact
↓ resume.pdf
# live terminal

Run a command

nslookup, dig, whois and ping run real lookups from your browser. Type help for the full list.

guest@parajuli — kp-sh
kp-sh 1.0 — type 'help' to list commands. DNS, WHOIS and ping lookups are real.

Lookups go to Cloudflare DNS-over-HTTPS, rdap.org and api.ipify.org. Port scans and traceroute need raw sockets, which browsers do not allow, so nmap shows how to run it locally instead.