Hi, I'm Robert Wallhead
This is my security & software development portfolio
- All
- Security tools
- Training tools
- For sale
- Other projects
Falcon
Key duplication clamp for the Lishi pliers
Lockwood & Schlage key duplication clamp, compatible with Lishi key cutting pliers.
Available to purchase | Free printable model files (Thingiverse) | Demo video (YouTube)
Covert REX trigger 2: Push to Enter
An improved request-to-exit trigger, disguised as an 8mm thick PUSH sign
Hidden within a Push sign is a remote-controlled actuator to trigger request to exit buttons, for physical security penetration testing/red teaming. The idea is you install it when visit the target during normal hours, as a tour, or under the guise of a facilities employee/contractor, then return at night to trigger it to open a door from the inside.
Covert REX trigger
The original request-to-exit trigger, disguised as an emergency door release
Disguising a mechanical "Useless Machine"-style mechanism in a ubiquitous wall box to release a Request-to-Exit button on demand, for physical penetration testing.
Project page (Hackaday.io) | Early iteration test video (YouTube)
PACS training lab
Training lab for Physical Access Control Systems
IT/OT Hack lab
Sandboxed IT/OT hack lab/ICS cyber range
A cyclic factory automation, operated by a PLC and other supporting systems and hardware. The automation continuously inflates and drains a blue balloon within the tank, simulating a rising and falling liquid level. Successful compromise of the environment (overfilling the tank) causes the balloon to pop, signalling success.
Ergonomic lock core gripper
Ergonomic core gripper for locksport practice
A 3D-printable holder originally designed for the Red Team Tools' Progressive Training Lock Set, but should work with any similar lock core. Allows for ergonomic (and fatigue-reducing) top-of-the-keyway picking.
Free printable model files (Thingiverse) | Loading the lock (YouTube) | Picking demo (YouTube)
VENTOLIN inhaler helper
Assistive device for people with limited grip strength
Software projects
These are some of the software and platforms that I've built, open-sourced or meaningfully contributed to (there are many more on my GitHub).
CTI Toolkit
(contributor)Assisted CERT Australia (now ASD ACSC) open-source a suite of Threat Intelligence tools.
Project repositoryResume
This is a subset of my training, qualifications and employment history, with more detail available on my LinkedIn.
Summary
Robert Wallhead
Security professional & software developer, with a passion for physical and cyber security, software and hardware development, problem solving and interesting projects!
- Victoria, Australia
- [email protected]
Qualifications
Covert Entry Associate
2025
Red Team Certification Group, Nevada, USA
Following completion of their Covert Methods of Entry and Physical Access Control Systems: Practical Hacking and Defence of RFID PACS courses in 2023 and 2024.
Professional experience
Cyber & Physical Security
2021 - Present
Tasmania/Victoria, Australia
- Wide-ranging Security Architect role at Hydro Tasmania, including physical security assurance.
- Established formal physical security assurance function, leading numerous cyber and physical security assessments (both hands-on and theoretical).
- Developed secure architectures and architecture governance for critical infrastructure uplift and compliance (including AESCSF and SOCI).
- Experienced in the application SABSA, AESCSF, IEC62443 and other frameworks to system and business security architecture.
Software Development
2008 - Present
Tasmania/Victoria, Australia
- Founded (in 2025) a successful security alerting SaaS platform (dnstwister.report), operating it until it was sold in 2024.
- Employed as a software developer (2016-2021), developing C# .NET web and complex desktop application, progressing to a senior role in 2017 and an acting management role for multiple later periods.
- Software development (predominantly in Python), with over 100 public open source repositories published, covering physical and cyber security, robotics and computer vision, embedded systems and web applications.