attack-path-analysis

BloodHound-style risk analysis for multi-agent AI architectures. Parses CrewAI, Dify, LangGraph, or generic YAML into a typed capability graph and detects reachable attack paths from untrusted input to sensitive data or external action, with live control simulation.

Open-source Continuous Threat Exposure Management (CTEM) platform: asset discovery, attack surface management, risk-based prioritization, validation and remediation in one place. Go API + Next.js web UI.

Cloud Identity Security Engineering — Go-based security research and tooling for AWS IAM attack-path analysis, privilege escalation detection, and CloudTrail-based detection engineering.

Visualize Active Directory attack paths, map them to MITRE ATT&CK coverage, and expose detection gaps in a safe synthetic SOC demo.

Local attack surface and attack path analyzer for hosts and Docker environments.

SAGE - An autonomous AI-assisted application security platform that converts repositories into interactive knowledge graphs, correlates NVD CVEs with code-level reachability, performs exploitability analysis using LLMs, generates remediation patches, validates fixes through testing and Semgrep, and automatically creates GitHub pull requests

Enterprise cloud attack path analysis platform using Neo4j graph databases, Cypher queries, and AI to map cloud assets, uncover lateral movement paths, identify toxic privilege combinations, and accelerate cloud security investigations.

Cloud Security Posture Management (CSPM) platform that maps AWS misconfigurations to MITRE ATT&CK techniques, attack paths, blast radius risk, and CIS/NIST/SOC2/PCI compliance controls.

A graph-first, agentic security framework for AWS that models cloud environments as attack graphs. Leverages LangGraph and Neo4j to perform recursive attack path analysis and autonomous remediation reasoning. Designed for the 'Assumed Breach' era.

Open AI Security Posture Management for AI agent discovery, MCP security, attack-path analysis, AI-BOM, OWASP Agentic security, and cyber risk quantification.

Autonomous AI-powered security incident response platform that analyzes CVE blast radius, maps attack paths, and orchestrates context-aware mitigations using FalkorDB graph intelligence and episodic memory.

This repository contains a vulnerability scanner mapped to the MITRE ATT&CK framework, featuring an animated, single-page web dashboard. Core Technologies: Python, Flask, Nmap (python-nmap), HTML/CSS/JS.

Context-aware adversarial path analysis for BloodHound / SharpHound Active Directory graphs.

A comprehensive graph-based attack path analysis tool that identifies hidden privilege escalation routes, blast radius zones, and critical chokepoints in Kubernetes clusters using classical graph algorithms and AI-powered threat narratives.

Context-aware vulnerability prioritization with attack-path chaining. Self-hosted, no lock-in, swap any scanner.

High-signal, read-only IAM analysis tool that detects privilege escalation paths via Service Account impersonation and trust overlap in Google Cloud.

Monitor your cloud assets.

Provider-neutral cloud attack-path and misconfiguration prioritization engine — graph-based exposure scoring, trust-relationship modeling, and explainable remediation

Multi-cloud security audit tool designed to visualize attack paths, identify public exposure, and analyze Blast Radius using Neo4j graph database.

BloodHound Attack Path Enumerator