Add Attack Surface Overview page#435
Open
ElliotFriedman wants to merge 4 commits intosecurity-alliance:developfrom
Open
Add Attack Surface Overview page#435ElliotFriedman wants to merge 4 commits intosecurity-alliance:developfrom
ElliotFriedman wants to merge 4 commits intosecurity-alliance:developfrom
Conversation
Visual security posture dashboard showing 12 attack vectors as a radial diagram. Nodes are color-coded (red/amber/green) by posture state with click-to-toggle and localStorage persistence. Clicking a node opens a detail card with description, attack tags, and framework guide links. Designed for CSOs to quickly assess and communicate security gaps. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Sidebar Configuration ReminderThis PR includes added, renamed, or removed documentation files:
Please ensure that:
See Contributing Guide – Sidebar & Navigation for more details. This is an automated reminder. If this PR doesn't need sidebar changes, you can ignore this message. |
Adds dev: true flag to sidebar entry per contributing guidelines. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Selected nodes now scale up 10% and show a soft color-matched glow instead of a detached ring outline. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Posts an automated PR comment when threatData.ts is modified, reminding contributors to include all required fields and verify framework links. Follows the same pattern as the existing vocs-config-reminder workflow. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
built with Refined Cloudflare Pages Action⚡ Cloudflare Pages Deployment
|
Collaborator
|
Hey @ElliotFriedman, thanks for the contribution! I think this is really cool! I have a few suggestions on how we could frame it a bit better:
wdyt? Thanks again for putting this together! |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Attack vectors covered
Smart Contract Exploits, Multisig Operational Failures, DPRK/Threat Actor Hiring, Leadership Phishing, Infrastructure Compromise, Frontend/DNS Hijacking, Operational Security Failures, Supply Chain Attacks, Monitoring & Alerting Gaps, Social Engineering, Duress Situations, Governance Attacks

Functionality
Clicking a node also opens a detail card below the map showing a description, severity level, example attack types as tags, a three-way GAP / IN PROGRESS / SECURED toggle, and a direct link to the relevant SEAL framework guide. All posture state is persisted in localStorage so users can return and pick up where they left off. The page is designed to give security leaders an at-a-glance view of their exposure without needing to read through documentation, and to serve as a jumping-off point into the existing framework content for remediation.

New files
components/attack-surface/—threatData.ts,AttackSurfaceDashboard.tsx,AttackSurface.cssdocs/pages/attack-surface.mdxModified files
components/index.ts— added exportvocs.config.tsx— added sidebar entry under IntroductionTest plan
pnpm docs:dev→ page renders at/attack-surface🤖 Generated with Claude Code