Open source. Open possibilities.

ripr is a static mutation-exposure analysis tool that identifies changed behavior your tests reach but don't actually verify, without running mutation testing.

SecureFlow is a local-first application security platform in Rust. It combines deterministic source-to-sink analysis, human validation workflows, and offline API inventorying. The tool prioritizes reproducible evidence, maintaining strict separation between automated candidates and final human judgments, with no automatic vulnerability validation.

Shannon is an open-source, autonomous AI pentester for web applications and APIs. It analyzes your source code to find attack paths, then executes real exploits against a running app, reporting only vulnerabilities proven with a working proof of concept.

ChaosSQL is a deterministic concurrency and isolation fuzzer for PostgreSQL, MySQL and SQLite. It schedules concurrent transactions, detects invariant violations such as lost updates and write skew, shrinks failures to minimal reproductions, and can guard CI pipelines against regressions.