SECURITY RUSSIAN ROULETTE · NO LOGIN REQUIRED
Pick.
Draw.
Pull the trigger.
Pick any published directory app or draw one at random. Your browser first reads its public schema — open entities and functions — then simulates the attack an unauthenticated hacker could run with no exploit: drain the data, wipe it, abuse the functions, lock the owner out. Secured apps end empty. Unsecured ones fire.
1 · SELECT OR DRAW A DIRECTORY APP
PLAYABLE DIRECTORY
2632 playable apps · 0 with approved evidence
Total playable apps: 2632. Apps with approved assessment evidence: 0. The cylinder is a six-chamber visualization of the approved-evidence population, not a security probability. Zero approved evidence does not disable play — every published app is playable.
2 · PULL THE TRIGGER
MindScribe Health
PUBLIC-SURFACE RECON
MindScribe Health
Open data entities
0/0
Open functions
1/1
The gun fired.
0 data source(s) drained & destroyed · 1 function(s) abused · owner locked out — all simulated locally. A real attacker would need no exploit, just the open endpoints your app already exposes to anyone.
Step 1 reads the app’s public schema with anonymous, read-only probes from your browser (no mutations, no record values shown). Step 2 is a fully local simulation of what an attacker could do with those open endpoints — nothing is actually sent, deleted, or invoked.