Security-Minded Developer | AppSec + Automation | Python & Full-Stack Tools

Security tools for modern application security.
CloakAndCipher is an open-source initiative focused on building practical, automation-friendly tools that help developers and security engineers ship safer code at scale.

We believe security should be usable, scalable, and insightful. Each project under CloakAndCipher is built to:

• Automate security checks where possible.
• Provide clear, actionable insights for developers.
• Fit seamlessly into modern DevSecOps pipelines.

• PhantomScanner → Lightweight static/dynamic vulnerability scanner with an interactive dashboard.
• VulnForge → Framework for aggregating and normalizing results from multiple security tools.
• ShadowTrace → Supply chain and dependency risk tracker with SBOM support.
• CipherPlayground → Interactive lab for testing OWASP Top 10 vulnerabilities in safe, containerized environments.
• SentinelCI → CI/CD pipeline security guard that integrates scanners and policies into GitHub Actions.

Each repository contains its own setup instructions, roadmap, and contribution guidelines.
To start exploring:

1. Visit a project repo.
2. Clone it locally or run via Docker (where supported).
3. Contribute by opening issues or pull requests.

We welcome contributions from the security and developer community. Whether you’re filing a bug, suggesting a feature, or writing code, your input helps strengthen these tools.

CloakAndCipher – building the future of open security, one tool at a time.