Security reference library
Five security references in one place: incident playbooks, a vulnerability catalogue, hardening guides, security tooling and core concepts, all backed by one API.
Indexed by intent
Know what can go wrong and what to do when it does.
Playbook
Incident response playbooks for application security
Incident-response playbooks for common application security events, with attack vectors, compromise indicators, and phased guidance from response through prevention.
Vulnerabilities
Catalogued weaknesses mapped to CWE
A searchable catalogue of software weaknesses with CWE identifiers, severity ratings and concise summaries, grouped by the security domain in which they usually appear.
Turn guidance into controls you can actually ship.
Hardening
Step-by-step hardening for every layer
Prioritised hardening checklists across application, API, website, container, Kubernetes, cloud, database, DevOps, DevSecOps, IoT and kiosk surfaces - each broken into concrete, ordered steps.
Tools
A curated directory of security tools
A working directory of security tooling organised by category and sector, from SAST and secrets management to cloud posture, container scanning and OSINT - with pricing at a glance.
The vocabulary and mental models the rest of this rests on.
