Security product
A security-testing platform anyone on the team can run
Security testing is usually the preserve of specialists: a dozen tools, cryptic output, and a queue for the one person who can read it. Mentarium built one company a single platform that runs the checks it needs and explains the results in plain English, so a business user or a QA engineer can run a scan and hand the findings straight to the developers who fix them.
Inside the product
The problem
The company depended on technical specialists to run and interpret security tests. Results arrived as raw tool output, which slowed fixes and kept the rest of the team out of the loop.
What was built
A modular web application that brings reconnaissance and open-source intelligence, vulnerability and port scanning, penetration-testing checks, API and web-application tests (including a fuzzing bot, client-side checks and HTTP verb tampering), static-code security linting, authentication and session checks (JWT manipulation, session management, rate-limit bypass), business-logic testing and OWASP-aligned checks into one product.
The report
Every run produces a report written in plain English: what the issue is, where it was found, why it matters, and how to fix it. Non-technical staff can read it, and developers can act on it without a translation step.
How it was built
A Python application built on Flask with a Tailwind CSS interface. Capabilities were built as independent modules so new checks could be added without reworking the rest of the product.
What changed
Security testing stopped being a bottleneck owned by one team. Business users and QA could run checks themselves and share actionable findings, which shortened the path from discovery to fix.