SoftwareTestingSuite
62 scanners and counting, one platform to find secrets, CVEs and injection flaws before someone less friendly does.
Tech stack
- Languages
- Python
- TypeScript
- Frameworks
- FastAPI
- React
- Celery
- Infra
- PostgreSQL
- TimescaleDB
- Redis
- AI tooling
- ML threat detection
This is the project where the security background stops being a lens and becomes the product. SoftwareTestingSuite is a vulnerability scanning platform, 62+ scanners across 15 domains, built to answer one question about any codebase or deployment: where does this break when the input is hostile?
What it does#
- Before deployment. Scanning for the things that should fail a build, from committed secrets and static-analysis findings to vulnerable dependencies, actually failing the build.
- Across the surface. Coverage runs from the web application classics through to modern attack surface like cloud, containers and AI prompt injection, because LLM apps are attackable too.
- Once it’s live. A monitoring and incident layer with posture and drift tracking, compliance mapping and incident management.
Why it matters#
Point tools for each of these exist. The value here is one consistent platform: shared reporting, shared severity language, and coverage that spans from a leaked key in git history to a prompt injection in production. It is also the most direct line between my defensive past and what I build now, which is why it gets to keep growing scanner by scanner.
The stack#
A Python CLI built on Click, httpx, pydantic and rich, a FastAPI backend with SQLAlchemy and Celery over Redis, PostgreSQL with TimescaleDB for the monitoring data, and a React TypeScript dashboard.
