Attack lab

Six real texts scanned live. 'Compliant' means safe to send.

4 attacks 2 controls live: nothing pre-recorded

Pick a preset. Red ones are attacks, green ones are honest requests that must still work.
Tamper. Choose any field and drop it, null it, change its type, upper-case it, flip one character, or add a field the product never asked for.
Send and read the real reply, or run every preset and watch the scoreboard fill.

What each preset tests

	Preset	Route	Why it matters
control	An ordinary sentence	`POST /suite/leakguard/v1/scan`	Nothing sensitive.
control	Order and invoice numbers	`POST /suite/leakguard/v1/scan`	Business numbers are not secrets: no false alarm.
attack	An AI key, an email and an SSN	`POST /suite/leakguard/v1/scan`	Three findings.
attack	An AWS access key ID	`POST /suite/leakguard/v1/scan`	Cloud credentials.
attack	A card number	`POST /suite/leakguard/v1/scan`	Passes the card checksum: flagged.
attack	A database address with a password	`POST /suite/leakguard/v1/scan`	The password inside the address is found.

Each button scans one text on the live service. Suite demo routes allow 120 calls per hour per address.

FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.