Teardown

Supply chain security you can see.

Teardown breaks your app’s dependencies into a 3D view then ranks what to fix first (KEV, public exploits, EPSS) instead of CVSS. It also writes a fix prompt for your agent. After years in security I’ve seen how little gets fixed from a list of vulns so visualizing where each one comes from helps.

Built using Next.js and Supabase on Vercel, Three.js through React Three Fiber for the 3D, vuln data from OSV and GitHub advisories. It’s plain logic over the exploit data and the LLM only writes explanations so it can’t hallucinate a priority.