Interactive AppSec code review checklist aligned to OWASP ASVS. Scope the review to what changed in the diff — auth, API, crypto, client-side, supply chain, AI/LLM, and more — with core sections always in play. Track progress across 100+ checks with dynamic filtering. All state stays in your browser.
Browser-based interactive threat modeling tool. Define system components and data flows, assess threats across all six STRIDE categories with guided questions, calculate risk ratings, and export results as JSON, HTML, Excel, or printable report. All data stays in your browser — nothing is transmitted to any server.
Interactive pentest workflow assistant. Configure your target, filter by platform and service type, paste tool output for heuristic analysis, and get dynamically recommended next steps with one-click command copying.
A custom Hugo theme used to display everything hosted on this website.