Sami Ali

Projects

Seven projects. Each was checked against something other than my own opinion, and the result is on its row. The table with every reference and CI run is on the home page.

  1. tripline v0.3.0

    Detection engineering

    When a detection rule changes, this replays recorded attacks through it and fails the build if the rule stays quiet.

    Reading 0 to 2 of 2 attack events

  2. sinkline v0.5.1

    Application security

    Reads Python web code and flags places where request data reaches a dangerous call, such as a SQL query, without being cleaned first.

    Reading +0.21 to +0.52 (not held out)

  3. vulnlab v0.1.1

    Web security training lab, Python

    Three small web apps with one planted bug each, a fix for each, and tests that show the damage and then show the fix stopping it. It runs only on your own machine.

    Reading 3 of 3 fixes verified; sinkline 2 of 3 detected (2 false positives on fixes)

  4. kevgate v0.1.1

    Vulnerability management and DevSecOps

    Takes vulnerability scanner output and returns a fix-first list, with bugs attackers are already exploiting at the top.

    Reading 6 of 6 mutants killed

Also

  1. kevgate-admit v0.1.0

    Kubernetes security, Go

    A gatekeeper for Kubernetes that refuses, or warns about, workloads whose container images carry known-exploited vulnerabilities.

    Reading 5 of 5 review findings closed

  2. fuzzdiff v0.2.0

    Memory safety and fuzzing, Rust

    A web-request parser rewritten from C into memory-safe Rust, checked by feeding both versions the same bytes and listing every difference.

    Reading 5 of 5 seeded bugs detected

  3. kev-risk-prioritization v0.3.0

    Vulnerability management

    A short Python script that ranks scan findings so the known-exploited ones come first.

    Reading 12 vs 9 KEV in the top 12 (synthetic demo)

Other repositories

Public, but not the work I would point to first.