Skip to content

cynthiaschomp/CVE-TO-MITRE-Mapper

Repository files navigation

CYNTHIA.OS // CVE-TO-MITRE MAPPER

"A military-grade, mobile-first interface for generative AI workflows. No backend. No logins. Pure utility."

CVE-to-MITRE AI Mapper is a specialized tactical intelligence interface designed to correlate CVE vulnerabilities to MITRE ATT&CK TTPs using Semantic AI Analysis. It utilizes a "Zero-State Protocol" (Bring Your Own Key) architecture, allowing users to interact with the Google Gemini API directly from the client side without requiring a database or user accounts.

Live Demo | Report Bug

⚡ System Capabilities

1. The "Active Hero" Layout

Unlike traditional SaaS landing pages that hide value behind a login wall, Cynthia.OS presents the tool interface immediately above the fold.

  • Tactical Input Console: High-contrast, terminal-style inputs using JetBrains Mono.
  • Mobile Command Center: Optimized for vertical scrolling and touch interaction.
  • Visual Physics: "Smoked Obsidian" glass panels (backdrop-blur-xl) and Neon Pink (#FF1F7D) tactile feedback.

2. Zero-State Authentication (BYOK)

This system respects user privacy and eliminates server costs by using a Client-Side API Key injection method.

  • No User Database: No sign-ups required.
  • Local Persistence: API keys are stored securely in the browser's localStorage.
  • Smart Gating: The "API Disconnected" modal only triggers when the user attempts to execute a command without credentials.

3. Cyberpunk Design System

A strict design system built on React + Tailwind CSS.

  • The Void: Deep black background (#050505) -- never pure white.
  • Typography: Oswald for authoritative headers, JetBrains Mono for data integrity.
  • Micro-Interactions: Loading skeletons, typewriter effects for AI output, and pulse animations for system status.

🛠 Tech Stack & Architecture

  • Core Framework: React (Vite)
  • Styling: Tailwind CSS (Utility-first)
  • Icons: Lucide-React
  • AI Model: Google Gemini (via @google/genai)

🚀 Deployment Protocol

Prerequisites

  • Node.js (v18+)
  • npm or yarn

Installation

# 1. Clone the repository
git clone https://github.com/yourusername/cve-to-mitre-mapper.git

# 2. Navigate to directory
cd cve-to-mitre-mapper

# 3. Install dependencies
npm install

# 4. Initialize local development server
npm run dev

Environment Variables

This project requires NO .env file for the backend, as the API key is provided by the end-user via the UI.

However, to hardcode a specific system prompt or model tuning, modify constants.ts.

📂 Project Structure

/
├── components/       # UI Components (Layout, Input, Results, Modal)
├── services/         # Gemini API Integration
├── App.tsx           # Main Application Logic
├── constants.ts      # System Prompts & Configuration
├── types.ts          # TypeScript Interfaces
└── index.tsx         # Entry Point

🔒 Privacy & Security

Cynthia.OS is a client-side interface.

  • Push-Safe Codebase: No hardcoded credentials exist in this repository. It is safe to fork and push to public GitHub repositories without risk of leaking secrets.
  • Data Privacy: Input data and generated reports are sent directly from the user's browser to the Google Gemini API.
  • No Retention: This application does not cache, log, or store user inputs or API keys on any external server.
  • Key Storage: API keys are stored in localStorage to persist sessions for the user's convenience and can be cleared via the browser cache.

👩‍💻 About the Architect

Cynthia Schomp - Senior Frontend Architect

Cynthia.OS is a portfolio demonstration of "Vibe Coding" -- the intersection of high-fidelity aesthetics and functional AI engineering. This project showcases the ability to build sophisticated, branded software tools without the bloat of traditional full-stack requirements.

Connect: Website: cynthiaschomp.com

⚖️ License

Distributed under the MIT License. See LICENSE for more information.

Built with precision in Colorado Springs, CO.

About

Deploy generative AI to semantically map vulnerability descriptions to adversary TTPs. Export directly to MITRE Navigator layers.

Resources

Stars

Watchers

Forks

Releases

Packages

Contributors

Languages