Troy Hunt Portfolio
Creator and operator of Have I Been Pwned, the breach-notification service now used by 47+ national governments to monitor their own domains against leaked credential data, alongside a long-running blog on breach analysis and web security.
What makes it work
A breakdown of the choices that make this portfolio stand out.
A free public tool that is also the core credential
Have I Been Pwned exists as a live, usable service rather than a described past project, and its adoption by dozens of national governments is a form of validation no self-description could match.
Breach writeups that combine technical detail with practical guidance
Posts on real incidents walk through what happened and what it means for affected users, bridging pure technical analysis and public communication.
Diversified authority across formats
The portfolio spans a free public service, paid Pluralsight courses, and conference workshops, showing the same expertise packaged for different audiences rather than a single static output.
What Cybersecurity Analysts can take from this
Specific, actionable tips to apply to your own portfolio — no generic advice.
If you can build a small, genuinely useful public tool in your specialty, let it anchor your portfolio — a live tool people actually use outweighs any description of your skills.
When writing up an incident, address both the technical mechanism and what affected users should actually do — that combination separates practitioner writing from pure research.
Package the same core expertise across multiple formats (free content, paid courses, live talks) to reach different audiences without diluting the underlying work.
More Cybersecurity Analyst portfolios
Ready to build your portfolio?
Follow the Cybersecurity Analyst roadmap — skills, projects, and timeline to get hired.