Cognis Digital

C2 server fingerprinter — Cobalt Strike, Sliver, Mythic, Havoc, Brute Ratel

Analyze an ADS-B feed/CSV for anomalies: callsign spoofing, squawk 7500/7600/7700, and unusual loiter patterns.

Free-tier blockchain investigator — ETH/BTC clustering + sanctions xref

AIS vessel tracking & sanctions-evasion anomaly detection

Replay, fuzz, and assert on CAN bus traffic from a .pcap or SocketCAN interface with a tiny YAML DSL.

Image geolocation toolkit — EXIF, sun-shadow, OCR, reverse-search

Identity resolution dossier — username/email/phone cross-platform

PII discovery across warehouses and lakes (data-side scanner)

Generate a CycloneDX SBOM directly from an unpacked firmware root filesystem and flag components with known CVEs and EOL kernels.

Builds a transaction graph from ledger/account data and surfaces structuring, layering, and mule-network patterns for AML triage.

Offline RF signal reconnaissance & triage from capture files — detect, fingerprint & classify emitters (drone/Wi-Fi/BLE/GNSS) without demod. Defensive, zero-dependency, CLI + MCP.

Scans any wallet for dangerous ERC-20/721/1155 token approvals and infinite allowances, scoring drainer exposure and emitting revoke transactions.

Sniff and decode BLE GATT traffic, fingerprint device profiles, and assert on insecure pairing/characteristics in CI against a capture.

Audit UEFI firmware dumps for missing Secure Boot keys, unsigned modules, S3 boot-script vulns, and known SMM threats.

Self-hosted password cracking queue — multi-user hashcat with audit log

Model your sales pipeline as a YAML state machine and compute conversion rates, stage velocity, and weighted forecast straight from CRM exports.

Re-identification risk assessment that computes k-anonymity, l-diversity, and HIPAA Safe Harbor compliance on a dataset.

Server-side outbound connection auditor — eBPF/Falco wrapper

FedRAMP boundary visualizer & OSCAL-format SSP/POAM generator

Diff two firmware images and surface exactly what changed: new binaries, flipped config flags, added certs, and shifted entropy regions.

GSA Schedule opportunity surveyor — SAM.gov + eBuy + FedConnect

Scan firmware blobs and filesystem dumps for hardcoded private keys, API tokens, default creds, and weak RSA/ECC material.

Lint documents against MIL-STD / DoD formatting and classification-marking rules.

Spin up a high-interaction Modbus/DNP3 ICS honeypot that logs attacker register reads/writes as structured JSON.

OSS license compliance auditor — AGPL contamination + NOTICE generation

Validate OTA update packages end-to-end: signature chains, rollback protection, anti-downgrade counters, and delta-patch integrity.

Summarize flows/talkers/protocols from a pcap text export

Local PII discovery in your own files — SSN/CC/passport/DL/email/phone/DOB

Hardened browser profile generator — Firefox / LibreWolf / Brave

RAG corpus poisoning detector — embedding anomalies, backdoor triggers

The autonomous security agent for your AI stack — finds the vulns in your MCP servers & agent tools AND writes the fixes, on a local model.

Family phone stalkerware audit — MVT-class iOS/Android forensics

Run simple YARA-style string/regex rules over a directory