Header analyzer
Scores the HTTP security headers of any domain.
Open tool →// TTPSEC LABS — OPEN TO THE COMMUNITY
OPEN CYBERSECURITY LABORATORY
Free tools, a honeypot with real telemetry and code projects in preparation. Everything the group builds for research is intended to return to the community — no signup or paywalls.
// LATAM threat dashboard
Honeypot telemetry, live
Data derived from the OVNI-Agentic HoneyPot Net: sensors in Chile, France and New York capturing reconnaissance and attacks against exposed AI services.
Attacks last 24h743
Top 3 originsUS 6,520 · DE 5,304 · NL 3,340
Most-attacked serviceollama5,996 AI probes
Dominant categoryrecon1,736 unique sources
| UTC TIME | CATEGORY | DETAIL | ORIGIN | SENSOR |
|---|---|---|---|---|
| 14:32:07 | recon | GET /v1/models | DE | ovni-fra-01 |
| 14:31:52 | recon | POST /api/generate · ollama | US | navenodrisa-nyc |
| 14:31:40 | jailbreak | POST /v1/chat/completions · prompt-injection | NL | ovni-fra-01 |
| 14:31:18 | recon | GET /.env | CN | ovni-cl-01 |
| 14:30:59 | recon | GET /api/tags · ollama | US | navenodrisa-nyc |
| 14:30:44 | recon | POST /v1/completions · openai | FR | ovni-fra-01 |
| 14:30:21 | exploit | POST /api/pull · path-traversal | RU | ovni-cl-01 |
| 14:30:03 | recon | GET /huggingface/status | BR | ovni-cl-01 |
| 14:29:47 | recon | GET /v1/models · claude | GB | navenodrisa-nyc |
| 14:29:30 | benign | GET /health | CL | ovni-cl-01 |
| 14:29:12 | recon | POST /api/generate · deepseek | HK | ovni-fra-01 |
| 14:28:55 | jailbreak | POST /v1/chat · DAN-style | SG | navenodrisa-nyc |
▸ Sample of the public dataset (CC-BY-4.0). The live feed replays a representative sample while the public API is not connected.
// Mini-tools
Eight utilities, zero friction
Designed to answer one concrete question in seconds. They run in your browser.
security.txt verifier
Validates an RFC 9116 vulnerability disclosure file.
Open tool →LLM exposure scanner
Detects AI endpoints exposed to the internet.
Open tool →IOC decoder
Defangs, refangs and normalizes obfuscated indicators.
Open tool →Passive DNS recon
Enumerates exposed subdomains and records without touching the target.
Open tool →Hash identifier
Recognizes a hash algorithm and checks public sources.
Open tool →Entropy meter
Calculates the real strength of a passphrase in bits.
Open tool →Surface map
Summarizes visible ports, services and technologies.
Open tool →// Open source roadmap
Code in preparation
ovni-honeypot
Agentic honeypot for exposed AI services. The engine behind the OVNI sensors.
RustIN PREPARATION
ot-modbus-toolkit
Modbus/TCP and DNP3 auditing utilities for industrial networks.
PythonIN PREPARATION
ioc-forge
Library for parsing, defanging and enriching indicators of compromise.
TypeScriptIN PREPARATION
purpleteam-labs
Reproducible practice ranges for red and blue team exercises.
HCLIN PREPARATION
// Contribute
Use the data. Test the tools. Tell us what breaks.
The honeypot dataset is open and citable. If you build something with it or find a bug, we want to hear about it.
▸ ovni-cl-01 · ovni-fra-01 · navenodrisa-nyc · CC-BY-4.0