Fusion Technology Strategies builds practical, evidence-first tools for incident response, AI security, personal privacy, Windows administration, cloud resilience, accessibility, and federal cloud operations.
The projects below are designed for operators who need to understand what a tool will do, test it safely, and retain useful evidence afterward. Each repository documents its guardrails, permissions, limitations, and validation approach.
| Operator goal | Project | Status | Fastest meaningful evaluation |
|---|---|---|---|
| Investigate and contain a Microsoft 365 incident | M365 Incident Response Console | Maintained public release | Open the sanitized case report, then follow the safe lab guide. |
| Enforce local privacy and policy before optional Bedrock evaluation | Bedrock Guardrail Firewall | Maintained public release | Run the 60-second offline evaluation and inspect the sanitized demo. |
| Turn website and PDF findings into reviewable accessibility evidence | WCAG 2.2 Site and PDF Scanner | Maintained public release | View the synthetic report and run the five-minute walkthrough. |
- Windows Admin Toolkit is a maintained, signed-release toolkit for guarded local and remote administration. Preview sanitized output, review the guarded automation flow, or download the signed release.
- Fool's Gold is a maintained offline decoy-detection and assurance tool for AWS GovCloud and Windows environments. Run the 60-second synthetic exercise and review the documented validation boundaries.
- AWS Chaos Engineering Framework is a maintained public release for reviewable, bounded AWS fault-injection planning and guarded extension workflows. Start with the plan-only game-day walkthrough or PyPI 2.0.4.
- AWS GovHawk Efficiency Analyzer is a maintained AWS GovCloud analyzer for surfacing potential waste, security blind spots, and operational risk across 29 services. It complements AWS Config, Security Hub, and workload-owner review with a focused, evidence-backed assessment.
- IDS Rule Converter is a maintained public release for converting and validating Snort and Suricata rules while refusing or separating ambiguous semantics. Install PyPI 4.0.2 or inspect the strict-versus-partial example.
- Ultra-Fast Proxy Fetcher & Tester is a maintained network-diagnostics utility. It measures bounded reachability and latency; it does not establish that a proxy is trustworthy, anonymous, or appropriate for sensitive traffic. Install PyPI 2.0.1.
- PatchBlitz runtimes publishes pinned, reproducible runtime archives used by the PatchBlitz Windows installer. It is a supply-chain support repository, not a standalone PatchBlitz product or end-user application.
Status descriptions reflect each repository's supported use and validation evidence; they are not compliance certifications or warranties.
- Safe before clever: potentially disruptive actions are gated, scoped, and documented.
- Evidence over adjectives: projects include deterministic tests, sample outputs, and explicit limitations.
- Auditable dependencies: automated updates are reviewed, workflows use immutable action references, and protected branches require validation.
- Operator ownership: local and offline modes are available where the problem permits them; telemetry is not added to security or administration tools merely to count users.
- Portable by design: the primary runtime remains straightforward to inspect and move, even when optional package and integration layers are available.
The security scanner operations record documents portfolio schedules, ownership, exceptions, evidence retention, and the verification process.
Questions, reproducible bug reports, and implementation feedback are welcome in the relevant project. Please use each repository's SECURITY.md instructions for vulnerabilities instead of opening a public issue.
For consulting and mission support, visit https://www.fusiontsi.com or email jeff@fusiontsi.com.