# DMCS Labs – AppSec Intelligence Platform

DMCS Labs – AppSec Intelligence Platform is a premium, enterprise-style application security platform prototype designed to help security teams, product security leaders, and engineers understand risk, prioritize remediation, and support compliance readiness.

## Overview

This platform provides a modern AppSec workflow that combines asset inventory, findings management, contextual risk scoring, CVSS scoring, compliance mapping, audit logging, and automated discovery-to-asset synchronization.

The goal is to create a decision-making platform that answers:

- What is our current security posture?

- What is the highest risk right now?

- What needs to be fixed first?

- Which assets are most exposed?

- Are we compliant?

## Core Features

- Executive security dashboard

- Findings management with drill-down detail views

- Asset inventory with business and regulatory context

- Contextual risk scoring

- CVSS scoring and vector tracking

- Compliance posture dashboard

- Risk heat map

- Audit log and evidence tracking

- Automated discovery to asset inventory synchronization

- Premium enterprise dark-mode UI

## Modules

- Dashboard

- Findings

- Assets

- Discovery

- Threat Model

- Compliance

- Audit

- Reports

- Settings

## Tech Stack

- Python

- Flask

- HTML / Jinja

- Custom CSS

- Bootstrap

- Bootstrap Icons

- Chart.js

- JSON-based data layer

## Current Capabilities

- View and manage security findings

- Link findings to assets

- Score findings using contextual business and technical risk

- Display CVSS alongside platform-specific risk

- Track compliance posture visually

- Log important platform actions automatically

- Discover and sync assets into the inventory automatically

## Project Structure

AI AppSec Validation Lab/

├── app.py

├── findings.json

├── assets.json

├── audit\_log.json

├── discovery\_results.json

├── templates/

├── static/