KiroSec

Small UI changes:

Drop zone flicker fixed — dragleave fired when the pointer crossed onto a child (icon/label), so the highlight blinked while you were still inside the target.

• Palette arrow keys wrap — ArrowDown on the last row was a dead key; Up now jumps to the bottom. Added Home/End.

• Scroll no longer steals selection — rows fired setActive on every mousemove, so arrow-key scrolling under a still cursor yanked the highlight back. Holding ArrowDown fought itself.

• Palette made screen-reader accessible — added combobox/listbox ARIA (aria-activedescendant, role="option", aria-selected). It previously announced nothing about the highlighted row. Matters for enterprise procurement, not just decency.

The core product is still built in Rust, with working Windows and Linux installers already available.

The installers are not code-signed/certified yet, so there’s still a lot of work ahead around packaging, hardening, testing, and security.

I’m especially looking for feedback from security professionals who can help identify risks, weak points, and areas that need improvement.

If you’re interested in trying the demo or reviewing the project, contact me.

Trying out Convex as an all-in-one backend solution.

Convex is a reactive backend platform that can serve as an alternative to traditional Backend-as-a-Service tools like Firebase and Supabase, combining database, backend functions, real-time updates, authentication integrations, and more into one developer-friendly platform.

Curious to see how it performs for production apps and whether it can simplify the usual frontend + backend + database stack.

https://convex.dev/referral/LEWISV3067

Project will be pause temporarily due migration of infrastructure. Will move to another VPS.

KIROSEC is in closed beta. Book a walkthrough and we will show you a real case end to end — import, detections, and the write-up that comes out. An offline-first, multi-tenant security log analysis platform for MSPs

Main features

• Ingest — Windows (EVTX), Linux (auditd, Sysmon-for-Linux), macOS, and seven cloud importers (M365 UAL, Entra sign-in + risk, Exchange message trace, CloudTrail, Okta, Google Workspace, SIEM re-export) → one canonical event model

• Detect — 326 versioned YAML rules across 184 ATT&CK techniques, each with positive/negative fixtures

• Correlate — sequence, threshold and baseline primitives group findings into incidents

• Summarise — alert rollup: one line per behaviour, not per event

• Report — technical and executive, redactable, with evidence references

• Multi-tenancy — MSP console, customer portal, tenant branding

• On-device AI Assist — explains evidence, never decides an incident