An open-source knowledge base of defensive countermeasures to protect AI/ML systems. Features interactive views and maps defenses to known threats from frameworks like MITRE ATLAS, MAESTRO, and OWASP.

Threat-informed defense and cyber threat intelligence (CTI) analysis platform that correlates APT groups, MITRE ATT&CK tactics and techniques, CVEs, and detection data to help analysts prioritize hunts and strengthen defensive posture.

Ferramenta de inspeção passiva de segurança web focada em análise de superfície de ataque, enumeração e geração de relatórios AppSec

Gamified cybersecurity training platform. Real-time APT attacks while you learn. Serverless security, offensive-defensive missions, AI tutor and Node.js server.

A zero-dependency, cross-platform CLI to exterminate the ansi-regex supply-chain attack and related variants.

MQC Aegis is a real-time decision engine that turns fragmented risk signals into correlated incidents, operator actions, and live defensive intelligence.

EndPointX is a Firefox-first local-only endpoint collection tool for authorized security review.

An anonymized AppSec case study analyzing availability, error handling, and access control in a healthcare REST API.

Privacy Armor - Google Extension Tracker blocker + fingerprint surface reducer. Defensive privacy tool.

VishNet is a voice-based social engineering simulation platform that orchestrates AI-driven vishing attacks with realistic personas, voice cloning, live call interactions, and analytics for authorized security training.

Tampermonkey userscript for local-only rendered DOM review of comments, hidden fields, attributes, and internal URLs.

How AI collapsed the skill floor and why legacy defense must evolve — Docusaurus guide for SOC analysts

A small tool to create canary links.

CVSS scoring tools and research

🛡️ Block trackers and reduce browser fingerprinting with Privacy Armor, a Chrome extension that enhances your online privacy effortlessly.

RiskSentinel is a browser extension that analyzes websites in real time for scam and fraud risk using domain intelligence, content inspection, checkout analysis, and optional reputation APIs. Get clear risk scores and red flags before you click, log in, or pay.

Herramienta de auditoria defensiva para detectar vulnerabilidades de clickjacking

A lightweight, chainable, reusable input validation and sanitization utility for JavaScript projects. Drop it into any project and import it wherever you need to validate user input.

A defensive security Chrome extension that protects users from intrusive advertising by blocking full-screen overlays, popup ads, and malicious redirects using advanced heuristic detection algorithms

BrittleBench: a defender's audit of public detection content robustness