Projects
Explore McHughCyber's public cybersecurity projects, from security architecture tools to practical research and technical resources. Discover what each project is building, follow its progress and access available applications.
Project index
Explore our current projects, discover their objectives and capabilities, and follow their development as new work becomes available.
ArchWeave 2.0.0 is a privacy-first, client-side Architecture as Code studio for structured JSON/YAML models and interactive system diagrams. The established single-view editor remains the default; an opt-in saved-view preview adds explicit multi-view migration and architecture review workflows. Release-candidate nomination is approved, but G5 qualification and production cutover remain on hold.
RiskStudio 1.0.0-rc.1 is a local-first browser risk register for modelling risk matrices, reusable controls, evidence quality, treatment actions and projected target risk. It keeps register content on the user's device and supports canonical JSON export, factual intelligence digests and optional local recovery. RC2 staging and release evidence remain open; no live production deployment is claimed.
Neural ISM is a proposed browser-based, framework-agnostic security control assurance workbench with first-class support for the Australian Government Information Security Manual (ISM). Its local-first design keeps workspace content in the browser while making implementation narratives, reference-only evidence, attestations, user-managed controls and portable exports easier to review.
WeekLedger is a browser-local timesheet for consultants who want to record weekly work, organise clients and projects, reconcile billable time and export portable reports without accounts, analytics or server-side record storage. It is a release candidate with local-browser storage and user-managed backups.
Future projects
Our work continues to evolve across security architecture, threat modelling, cybersecurity automation and applied research. Explore the areas guiding future tools, projects and technical resources.
Architecture patterns, system context and security decision support.
Practical modelling approaches for understanding attack paths and design risk.
Utilities and workflows that reduce manual security effort.
Public notes, technical findings and project research artefacts.
Small, focused tools that can support practitioners and builders.