Skip to content
EmbedHarborPRODUCT SECURITY
Existing account sign in ↗
LIVE · Current capability documentation

A workflow you can inspect.

Start the existing stack, explore the prototype, and keep DEMO separate from LIVE.

Run the project

Use the repository README: docker compose up --build -d. Public entry is /. Account sign-in is /login and the product portfolio is /products.

Prototype tools

JSON tools support bounded CycloneDX 1.4–1.6 or SPDX 2.3 structure checks, at most 1.5 MB, 500 occurrences and depth 20. They do not perform official schema validation. Firmware inspection reads up to 10 MB for SHA-256 and byte size only.

Existing Certificate Doctor

POST /api/v1/certificates/inspect decodes one public PEM and checks dates. PARSED is not trust validation. Chain status stays NOT_VERIFIED; private keys are rejected.

Continue development

The PRD is in docs/requirement/v2. Implementation, capability boundaries, test results and Story traceability are in docs/design/00-product-planning/prototype. The prototype uses a typed synthetic dataset and tab-local session rather than a mock customer API.

Explore tools and their limitationsSecurity & data handling →

Strictly necessary

Remember your language and consent choice, and keep your session secure. Always on.

Always on

Analytics

Records anonymous page and tool events in this browser. No third-party analytics provider receives them.

You can change this choice at any time from Cookie settings in the footer.

This prototype implements a consent choice, not a legal certification. Production use still requires a reviewed cookie table, legal bases, retention limits and a working withdrawal path.