"A military-grade, mobile-first interface for generative AI workflows. No backend. No logins. Pure utility."
CVE-to-MITRE AI Mapper is a specialized tactical intelligence interface designed to correlate CVE vulnerabilities to MITRE ATT&CK TTPs using Semantic AI Analysis. It utilizes a "Zero-State Protocol" (Bring Your Own Key) architecture, allowing users to interact with the Google Gemini API directly from the client side without requiring a database or user accounts.
Live Demo | Report Bug
Unlike traditional SaaS landing pages that hide value behind a login wall, Cynthia.OS presents the tool interface immediately above the fold.
- Tactical Input Console: High-contrast, terminal-style inputs using JetBrains Mono.
- Mobile Command Center: Optimized for vertical scrolling and touch interaction.
- Visual Physics: "Smoked Obsidian" glass panels (backdrop-blur-xl) and Neon Pink (#FF1F7D) tactile feedback.
This system respects user privacy and eliminates server costs by using a Client-Side API Key injection method.
- No User Database: No sign-ups required.
- Local Persistence: API keys are stored securely in the browser's localStorage.
- Smart Gating: The "API Disconnected" modal only triggers when the user attempts to execute a command without credentials.
A strict design system built on React + Tailwind CSS.
- The Void: Deep black background (#050505) -- never pure white.
- Typography: Oswald for authoritative headers, JetBrains Mono for data integrity.
- Micro-Interactions: Loading skeletons, typewriter effects for AI output, and pulse animations for system status.
- Core Framework: React (Vite)
- Styling: Tailwind CSS (Utility-first)
- Icons: Lucide-React
- AI Model: Google Gemini (via
@google/genai)
- Node.js (v18+)
- npm or yarn
# 1. Clone the repository
git clone https://github.com/yourusername/cve-to-mitre-mapper.git
# 2. Navigate to directory
cd cve-to-mitre-mapper
# 3. Install dependencies
npm install
# 4. Initialize local development server
npm run devThis project requires NO .env file for the backend, as the API key is provided by the end-user via the UI.
However, to hardcode a specific system prompt or model tuning, modify constants.ts.
/
├── components/ # UI Components (Layout, Input, Results, Modal)
├── services/ # Gemini API Integration
├── App.tsx # Main Application Logic
├── constants.ts # System Prompts & Configuration
├── types.ts # TypeScript Interfaces
└── index.tsx # Entry Point
Cynthia.OS is a client-side interface.
- Push-Safe Codebase: No hardcoded credentials exist in this repository. It is safe to fork and push to public GitHub repositories without risk of leaking secrets.
- Data Privacy: Input data and generated reports are sent directly from the user's browser to the Google Gemini API.
- No Retention: This application does not cache, log, or store user inputs or API keys on any external server.
- Key Storage: API keys are stored in
localStorageto persist sessions for the user's convenience and can be cleared via the browser cache.
Cynthia Schomp - Senior Frontend Architect
Cynthia.OS is a portfolio demonstration of "Vibe Coding" -- the intersection of high-fidelity aesthetics and functional AI engineering. This project showcases the ability to build sophisticated, branded software tools without the bloat of traditional full-stack requirements.
Connect: Website: cynthiaschomp.com
Distributed under the MIT License. See LICENSE for more information.
Built with precision in Colorado Springs, CO.