Security tooling where AI isn't bolted on — it's a first-class citizen in the design, the workflow, and the output. The work spans threat intelligence, monitoring, and the tooling that makes both faster and sharper for the analysts and engineers who rely on them.
The name is the thesis: what's visible is a fraction of what's there. Our tools are built to surface the rest.
- IcebergCTI — a cyber threat intelligence authoring and dissemination platform: structure, write, and share intelligence products built for the people who actually consume them. In development.
- IcebergCM — a security-first case management tool for cyber teams: alert ingestion, AI-assisted triage, and escalation into investigation cases. In development.
- IcebergTTX — a cyber and business resilience tabletop exercise platform. In development.
- IcebergEBS — a monitoring tool for Chromium, Electron, and similar extension surfaces, watching for risky or changing extensions before they become an incident. In development.
- skilldeck — composable, reusable skills for AI coding agents. The foundation the rest is built on.
Each repository carries its own README, issues, and contribution notes. Start with a project above, open an issue for anything non-trivial, and keep pull requests small and tested. Reviews are thorough and friendly.
IcebergAI · security tooling with AI as a first-class citizen