// ARSENAL

Security Tooling

Built at the intersection of PAN-OS, GenAI, and cloud. Not demos — production scanners.

AISealACTIVE

AI Trust & Certification Platform — independent AI vendor certification, OWASP LLM Top 10 scanner, and TrustScore 0–100

All 10 OWASP LLM Top 10 + Agentic Top 10 (ASI01–ASI10) detectors
TrustScore 0–100 with risk-weighted category scoring
3-tier certification: ACF-1 / ACF-2 / ACF-3 with public badge + registry
EU AI Act conformity evidence package (Art. 9–15 mapping)
Post-quantum cryptography readiness scanner (NIST PQC, HNDL risk)
MITRE ATLAS v5.4 + NIST AI RMF + EU AI Act framework alignment
AI SecurityOWASP LLMCertificationNext.jsTypeScript
SCMReadyACTIVE

Panorama → Strata Cloud Manager migration analyzer — 26 automated checks including 9 silent failure modes the native tool misses

26 parity checks — 9 silent failures the native SCM pre-check misses entirely
Visual Device Group → SCM Folder hierarchy mapping
StackShift engine: Template Stacks → Shared/Site-Specific Snippets
CRITICAL/HIGH/MEDIUM findings with remediation steps + affected object names
Complexity score + SOW effort estimator (Quick / Standard / Complex)
PAN-OSStrata Cloud ManagerMigration
PANW Multi-Cloud LabACTIVE

Network infrastructure-as-code: Panorama + PA-VM HA firewall pairs across Azure & GCP, full network fabric, AKS/GKE, and CI/CD — ~2,400 lines of modular Terraform

~2,400 lines of modular Terraform across Azure, GCP, k8s, and Panorama modules
Panorama managing PA-VM HA pairs in Azure + GCP (mgmt/untrust/trust/ha2 dataplane)
Full fabric: VPC/VNet, subnets, peering, UDR routing, internal LB with HA failover
AKS + GKE clusters layered on top, automated firewall bootstrap
GitHub Actions CI/CD: plan → deploy → validate → destroy
TerraformMulti-CloudPAN-OS
badash-killchain
ACTIVE

LLM red-team attack chain framework — cross-application attack chains, prompt injection, and agent-to-agent exploitation

AI SecurityRed TeamPrompt Injection
LLMGuardT2
STABLE

OWASP LLM Top 10 red-team scanner with semantic detection — catches paraphrased attacks that bypass pattern matchers

OWASP LLMSemantic DetectionRed Team
CloudGuard
STABLE

Cloud misconfiguration scanner for AWS, Azure, and GCP with CIS Benchmark mapping and PDF reports

Cloud SecurityAzureAWS