attack-path-analysis

AAPP-MART is an advanced cybersecurity engine featuring AI-powered autonomous attack path prediction and multi-agent red team simulation. Designed for adversary emulation, threat modeling, security validation, risk assessment, and MITRE ATT&CK aligned.

Visualize Active Directory attack paths, map them to MITRE ATT&CK coverage, and expose detection gaps in a safe synthetic SOC demo.

Enterprise cloud attack path analysis platform using Neo4j graph databases, Cypher queries, and AI to map cloud assets, uncover lateral movement paths, identify toxic privilege combinations, and accelerate cloud security investigations.

Cloud Security Posture Management (CSPM) platform that maps AWS misconfigurations to MITRE ATT&CK techniques, attack paths, blast radius risk, and CIS/NIST/SOC2/PCI compliance controls.

Provider-neutral cloud attack-path and misconfiguration prioritization engine — graph-based exposure scoring, trust-relationship modeling, and explainable remediation

This repository contains a vulnerability scanner mapped to the MITRE ATT&CK framework, featuring an animated, single-page web dashboard. Core Technologies: Python, Flask, Nmap (python-nmap), HTML/CSS/JS.

Context-aware vulnerability prioritization with attack-path chaining. Self-hosted, no lock-in, swap any scanner.

Graph-based cyber attack propagation and blast radius simulator for enterprise environments. Models lateral movement, privilege escalation, and remediation impact using attack graphs.

Defensive AWS IAM attack-path analysis and privilege-escalation detection tool.

High-signal, read-only IAM analysis tool that detects privilege escalation paths via Service Account impersonation and trust overlap in Google Cloud.

PivotMap is an open-source attack path intelligence engine for offensive security teams. It ingests scan results, correlates vulnerabilities, builds a directed attack graph, and identifies realistic compromise paths. PivotMap focuses on reasoning, not scanning.

Air-gapped AI-assisted software assurance platform that combines application context analysis, security tool orchestration, vulnerability correlation, attack-path reasoning, and human-in-the-loop validation.

Open AI Security Posture Management for AI agent discovery, MCP security, attack-path analysis, AI-BOM, OWASP Agentic security, and cyber risk quantification.

Offline-first AWS IAM attack-path analysis engine

Defensive AD and Microsoft Entra ID exposure analyzer with identity risk detections, app permission review, Conditional Access checks, graph-based privilege paths and JSON reports.