Security software, built small and built to last.

Trojan Unicorn Ventures builds threat modeling tooling, supply-chain defenses, and utilities that do one thing. Most of it is open source.

Security tools & research

Threat modeling, supply-chain defense, and spoofing detection.

TMI Live

A REST API server and platform for humans and agents to run security review and threat modeling processes, with real-time collaborative data flow diagram editing.

tmi.dev API server Web app

tmi-clients tmi-tf tmi-tf-wh tmi-webhook-example

Hilt Coming soon

A native macOS application that protects secrets from local AI, requiring Touch ID before anything can read them.

brewsoak Live

A Homebrew wrapper that adds soak time before accepting recently updated formulae and casks, as a supply-chain-compromise mitigation.

GitHub

sqdist Live

A CLI that compares two strings to judge how likely one is spoofing or squatting on the other.

GitHub

AI

Agent skills and the plumbing between agents.

skills Live

Agent skills packaged as plugins, usable as a Claude or Codex marketplace. Includes skills for dependency management and updates, user journey discovery, and integration testing.

GitHub