EchlonLabs · Defensive security

Shield

A defensive security workflow engine. Shield runs multi-step assessments as declared, repeatable workflows and turns raw tool output into structured, prioritised findings.

What it does

Most scanning is one tool, one command, one wall of text to read by hand. Shield models an assessment as a workflow — an ordered set of steps with a clear goal — runs it against a target, and normalises every tool's output into a single finding format you can triage, track and compare across runs.

Core pieces

Workflow engine

Declarative, multi-step assessments instead of one-off commands — each step with its own inputs, outputs and success criteria.

Workflow library

Pre-built templates covering recon, network and web scanning, API and cloud audits, container and dependency review, and more.

Unified findings

Result parsers normalise each tool's raw output into one common finding format, so results are comparable and trackable.

CVE intelligence

Matches discovered service versions against known CVE data to surface likely exposures automatically.

Live dashboard

A React dashboard with a target list, scan queue, results panel and real-time workflow visualisation.

Runs on your own machine

Shield is self-hosted. It orchestrates tools locally and keeps findings on infrastructure you control.

Built for

Python · Flask React · TypeScript · Vite REST + Socket.IO Self-hosted