attack-path-analysis

BloodHound-style risk analysis for multi-agent AI architectures. Parses CrewAI, Dify, LangGraph, or generic YAML into a typed capability graph and detects reachable attack paths from untrusted input to sensitive data or external action, with live control simulation.

Open-source Continuous Threat Exposure Management (CTEM) platform: asset discovery, attack surface management, risk-based prioritization, validation and remediation in one place. Go API + Next.js web UI.

Cloud Identity Security Engineering — Go-based security research and tooling for AWS IAM attack-path analysis, privilege escalation detection, and CloudTrail-based detection engineering.

Visualize Active Directory attack paths, map them to MITRE ATT&CK coverage, and expose detection gaps in a safe synthetic SOC demo.

Local attack surface and attack path analyzer for hosts and Docker environments.

SAGE - An autonomous AI-assisted application security platform that converts repositories into interactive knowledge graphs, correlates NVD CVEs with code-level reachability, performs exploitability analysis using LLMs, generates remediation patches, validates fixes through testing and Semgrep, and automatically creates GitHub pull requests

Enterprise cloud attack path analysis platform using Neo4j graph databases, Cypher queries, and AI to map cloud assets, uncover lateral movement paths, identify toxic privilege combinations, and accelerate cloud security investigations.

AWS Cloud Security Posture Management (CSPM), multi-hop attack path reasoning, IaC security scanning, and threat telemetry platform in Python & Boto3

Cloud Security Posture Management (CSPM) platform that maps AWS misconfigurations to MITRE ATT&CK techniques, attack paths, blast radius risk, and CIS/NIST/SOC2/PCI compliance controls.

A graph-first, agentic security framework for AWS that models cloud environments as attack graphs. Leverages LangGraph and Neo4j to perform recursive attack path analysis and autonomous remediation reasoning. Designed for the 'Assumed Breach' era.

Provider-neutral cloud attack-path and misconfiguration prioritization engine — graph-based exposure scoring, trust-relationship modeling, and explainable remediation

A comprehensive graph-based attack path analysis tool that identifies hidden privilege escalation routes, blast radius zones, and critical chokepoints in Kubernetes clusters using classical graph algorithms and AI-powered threat narratives.

This repository contains a vulnerability scanner mapped to the MITRE ATT&CK framework, featuring an animated, single-page web dashboard. Core Technologies: Python, Flask, Nmap (python-nmap), HTML/CSS/JS.

Context-aware adversarial path analysis for BloodHound / SharpHound Active Directory graphs.

High-signal, read-only IAM analysis tool that detects privilege escalation paths via Service Account impersonation and trust overlap in Google Cloud.

Monitor your cloud assets.

Multi-cloud security audit tool designed to visualize attack paths, identify public exposure, and analyze Blast Radius using Neo4j graph database.

Evidence-first multi-cloud DDoS exposure detection and posture management for AWS, Azure, and GCP — WAF, Shield, origin bypass analysis, and attack-path inference.

SUNDER maps attack paths across AI agent and MCP configurations, finds low-cost remediations, and verifies the resulting graph. Includes a browser-based demo and a Python engine powered by FalkorDB.

Context-aware vulnerability prioritization with attack-path chaining. Self-hosted, no lock-in, swap any scanner.