HECAVEX

This repository publishes hecavex.com, my independent bilingual cyber threat intelligence publication. It contains investigations, technical assessments, Signal Briefs, commentary and the public record behind each research package.

Jekyll turns the Markdown archive into static files; every visible interface is original HECAVEX code maintained in this repository. The presentation layer is built from the publication shell in _layouts/publication.html, focused components in _includes, and the CSS and JavaScript entry points in assets/css and assets/js.

The portfolio uses the Cold Signal design system: a dark analyst workspace, cyan action colour, green confirmation colour, amber warning colour, Inter for reading and IBM Plex Mono for identifiers and interface metadata. Font files are self-hosted under assets/fonts; no visitor request is sent to a font CDN.

Run locally

Install Ruby, Bundler and Node.js 22, then run:

bundle install
npm ci
npm test
bundle exec jekyll serve --livereload

Jekyll writes the generated site to _site; do not edit that directory.

Publish research

English and Lithuanian posts live in matching folders:

• _posts/en/blogs/ and _posts/lt/blogs/ for commentary
• _posts/en/bulletins/ and _posts/lt/bulletins/ for Signal Briefs
• _posts/en/research/ and _posts/lt/research/ for investigations and technical work

Start from the closest file in _templates. Paired translations use the same translation_key. Templates set both draft: true and published: false; keep both safeguards until the copy, citations, image descriptions and metadata have been checked, then change them to draft: false and published: true for release.

Primary research and technical assessments include a visible publication record with stable ID, version, evidence basis, methods, confidence, TLP marking and revision history. See Editorial packages.

After adding or renaming a public post, regenerate its localized social card:

npm run generate:social

The generator renders deterministic, self-hosted 1200×630 PNG previews from each post's title, language, date and translation_key. Article diagrams remain static local SVGs; the published site does not load a diagram or mathematics runtime.

Validate a release

bundle exec ruby tools/validate_content.rb
npm test
JEKYLL_ENV=production bundle exec jekyll build
bundle exec ruby tools/audit_site.rb _site
npm run audit:responsive

The deployment workflow runs the same content, frontend, SEO, accessibility, link and responsive checks before publishing GitHub Pages.

Measurement is disabled unless HECAVEX_ANALYTICS_TOKEN is set. The implementation and privacy boundary are documented in Measurement.

HECAVEX network

• APT Notes — structured threat-actor knowledge
• HECAVEX Labs — research tools and datasets
• HECAVEX Radar — recently observed potential phishing signals relevant to Lithuania

The sites deploy independently while sharing HECAVEX identity, editorial language and cross-navigation.

Licensing

Original website code and templates are available under the repository's MIT license. Editorial work, evidence, datasets, media and third-party material are governed by the terms stated with each publication or research package; the software license does not relicense them.