The Security Suite
FwChange is the flagship of a modular suite of independent security tools, each built to solve a single problem end to end. They run on their own, and they run better together. A technical portfolio by FwChange, Firewall change management methodology
independent security tools, each solving one problem end to end.
enterprise firewall migrations behind the methodology the suite encodes.
firewall platforms covered across the suite's vendor support.
The tools
Each tool solves one problem. Together they map a complete approach to enterprise security engineering: modular, self-hosted, and deployed only where the workflow needs it.
Manage · Flagship
Multi-vendor firewall rule management with AI-assisted rule optimization, multi-level approval workflows, ticketing sync and compliance reporting. The flagship the rest of the suite supplements.
Migrate
Paste a firewall config from one vendor and get a validated translation for another. AI-assisted syntax translation with rule-by-rule verification and a diff you can sign off on before cutover.
Comply
Upload a security questionnaire as Excel or CSV and CompliBot drafts the answers from your own documentation through retrieval-augmented generation. Weeks of questionnaire work in hours.
Test
Orchestrate penetration tests with a multi-agent system: sandboxed Docker execution, a vector knowledge base and an attack-path graph that gets sharper with every engagement.
Research
Pre-meeting intelligence, competitor scanning and threat research with a three-pass AI synthesis over 40+ source domains, each rated for credibility, with delta detection between briefs.
Consult
A ten-module security platform built for consultants: risk assessment, phishing simulation, compliance tracking and engagement management, with client-facing reports, in one place.
Discover
Scan a network with ARP, SNMP and nmap, then auto-generate topology diagrams with one-click export to draw.io XML, classifying devices and flagging the ones nobody knew were there.
Assess
Assess compliance posture across ISO 27001, GDPR, NIS2, PCI-DSS, the EU AI Act, SOC 2, HIPAA and SOX, with AI-assisted gap analysis and audit-ready evidence behind every score.
Philosophy
The legacy security platform asks you to buy eight modules to use two, and to wait months to deploy them. This suite takes the opposite position.
Use cases
Independent on their own, the tools chain naturally for the workflows a security practice runs most.
FwMigrate translates an inherited config to your standard platform, FwChange takes over ongoing changes, and CompliBot completes the client's security questionnaire.
FwMigrate FwChange CompliBot
FwChange provides the change audit trail and CompliBot auto-fills the QSA questionnaire from it. Two weeks of preparation collapses into a day.
FwChange CompliBot
Moving from Cisco to Palo Alto? FwMigrate translates the config with validation, and FwChange tracks every change through the cutover.
FwMigrate FwChange
FAQ
No. Each tool is a fully independent application with its own database, authentication and deployment. The suite is a curated portfolio of independent tools, not a monolithic platform: deploy each one where it makes sense, on-premise, cloud or air-gapped.
FwChange is the production-grade flagship. The other tools are research prototypes built within the same methodology, each a working demonstration of an AI-assisted security workflow rather than a shrink-wrapped product.
Tufin and Skybox ship monolithic platforms. This suite is modular: each tool is an independent application, and the architecture favors composability over a single all-or-nothing deployment.
Each is designed as a standalone application. FwChange is the flagship; the others supplement it for specific workflows, migration, compliance Q&A, pentesting, intel, a full consultant platform, and network mapping.
Eight security tools developed by FwChange as part of a enterprise firewall migration research program across enterprise and regulated environments. Each tool is an original technical contribution demonstrating AI-assisted security engineering.