SECUBIAN is a French Linux distribution focused on evidence processing during Incident Response.

MCP server bridging Kali and FlareVM for automated Windows malware analysis. 48 tools, 5 prompts, 5 resources, composite playbooks (triage, behavioral, unpack, persistence audit).

Assemblyline 4 service that leverage the CAPA open source tool

Auto-generate structured GxP/regulatory audit reports from assessment data — GMP, ISO 13485, EU GMP, Supplier Audits — with compliance scoring, CAPA tracking, and AI-written narratives

Agent-space monorepo orchestrating the Heretek-RE per-MCP reverse-engineering toolchain

Unified software triage platform for static, dynamic, and behavioral analysis, scoring, and reporting.

ISO 27001 ISMS / GRC SaaS portfolio with NIST CSF + SOC 2 mapping: risks, SoA, audits, CAPA, management review, evidence index.

parse capa's json to ghidra's bookmark

MCP server exposing capa (Mandiant) for capability detection with MITRE ATT&CK / MBC mappings.

capa-lite for Java malware: tag each class with capabilities via API + string signatures. Runs on a .jar or a decompiled .java tree. Pure stdlib, no deps.