Skip to content

What we build

Built in-house

Tools we use on real work.

We build what we need to do the job properly, then release it. Some is open source. Some will be available to clients as we finish it.

Cloud misconfigurationOpen source

Ramwingu

A multi-cloud misconfiguration scanner for AWS and Azure. It finds the dangerous defaults and insecure settings that attackers look for first.

  • AWS and Azure from a single CLI command
  • Open inbound rules in EC2 security groups and Azure NSGs
  • Publicly reachable S3 buckets and storage accounts
  • Overly permissive IAM policies
  • Table or JSON output, so it fits in a pipeline
Read the source
Phishing simulationIn development

mitphisher

A phishing simulation platform for small companies. Run authorised simulations against your own team and turn the results into training rather than blame.

  • Built for small teams without a security function
  • Training that follows the mistake
  • Reporting you can share with an insurer or auditor
Not released yet

More on the way

We release tools as they are ready, not as they are announced.

Tell us what you are trying to solve and we will say whether we have something for it yet.

Get in touch