Tools
Standalone, runnable instruments that support the engagement — as distinct from the markdown frameworks and playbooks elsewhere in the repository.
| Tool | What it does | How to run |
|---|---|---|
kill-chain-assessment.html |
Maps an unknown estate into an attack graph, computes the shortest existential path (the kill chain), and sizes every node into a remediation quantum. The synthesis instrument for the first act of every engagement. | Open in any browser. Offline, no install, no network. State persists locally; exports to .json and .md. |
Design constraints for tools in this directory
- Offline and sovereign. Client attack-surface data must never leave the consultant's machine for a vendor cloud (Antifragile Manifest, Pillar 4). Tools here are single-file and dependency-free wherever possible.
- Exportable. Output drops into the engagement deliverables — the diagnostic report and the Findings Backlog — not into a proprietary format.
- Explicit, not magic. A tool makes the consultant's judgement repeatable; it does not replace it.
See the Kill Chain Assessment App spec for the model behind the first tool.