> booting royatwilliams.os ... > origin ......... Nassau, BS > node ........... Toronto, CA > build .......... ONLINE > organic signal . STRONG > firewall ....... ACTIVE > status ......... SECURE
Incoming transmission
I build websites that are hard to hack and easy to find.
Open a channel →Source code
I'm Roy. Born in The Bahamas, building in Toronto since 2014. I test teams and systems to keep them secure, manage and grow websites, and design and build new ones from scratch. I'm CompTIA Security+ and A+ certified, and the founder of InfoSec Infirmary.
Tap the underlined words to see the work
Preview
Pick a wordEach underlined word opens the work behind it.
Security that speaks your language.
I founded InfoSec Infirmary to give independent businesses the kind of protection that's usually priced for big companies. I speak plainly, find the gaps, fix them, and keep watch.
Case files
Secure · Penetration test + phishing simulation
Cybersecurity consultant · April–June 2026
Page Pros, an award-winning Toronto digital marketing agency, runs on two things attackers love: SEO platforms full of client data, and company email. I ran a two-phase engagement to test both, using methods aligned with PTES, the OWASP Testing Guide and MITRE ATT&CK.
Toolkit
Grow · Web management
Manager of Web · 2023–2026
I managed osteoporosis.ca, a bilingual national health site with interactive tools like the Know Your Risk quiz and Nutrient Calculator. My job was to keep it running, keep it secure, and help more Canadians find it.
2022–23 vs FY2025–26, English and French combined. Source: Osteoporosis Canada 2023 and 2026 impact reports.
Visit osteoporosis.ca ↗Build · Web design
Designer and developer · 2022
I designed and built the directory's website on WordPress, a home for Canada's animation community, powered by the Ottawa International Animation Festival (OIAF). When a wave of bot sign-ups hit the live site, I contained it, locked down registration with 2FA, and brought everything back online.
Protocol
Every project follows the six functions of the NIST Cybersecurity Framework (CSF) 2.0. A site that stays secure stays online, keeps its rankings, and keeps earning trust, so security and growth come from the same work.
Set the goals and the rules first: who owns the site, what has to be protected, and what growth should look like.
Take stock of everything: pages, plugins, accounts and vendors, plus a baseline of how search engines see you today.
Harden logins with 2FA, keep software updated, back everything up, and train the team to spot a phish.
Watch for trouble early: unusual sign-ups, expiring certificates, downtime, and sudden traffic drops.
When something happens, contain it fast with a plan, not panic. That's how I handled a live bot attack.
Restore service, protect the rankings you've earned, and fold the lessons back into the plan.
Logbook
Notes from the projects I'm working through. New entries land here first.
