FwChange Security Suite

Seven Tools. One Firewall Lifecycle.

Manage daily changes. Migrate between vendors. Automate compliance. Modular tools that work standalone — and better together.

A technical portfolio by Nicholas Falshaw — Principal Security Architect & AI Systems Engineer

FwChange
Manage
FwMigrate
Migrate
CompliBot
Comply

Seven Independent Tools

Each tool solves one problem. The Suite demonstrates a modular approach to enterprise security engineering.

Live
Manage

FwChange

Multi-vendor firewall rule management with JIRA integration, AI-powered rule optimization, multi-level approval workflows, and compliance reporting.

  • Palo Alto, Fortinet, Check Point, Cisco ASA
  • AI shadow rule & conflict detection
  • JIRA & Taiga bidirectional sync
  • Multi-level approval workflows
  • Policy drift detection
  • PCI-DSS, ISO 27001, NIS2 reports
View Live Demo
Early Access
Migrate

FwMigrate

Paste a firewall config from any vendor, get a validated translation for any other. AI-powered syntax translation with rule-by-rule verification.

  • Cisco ASA, Palo Alto, Fortinet, Check Point, Juniper SRX
  • AI-powered config translation
  • Rule-by-rule validation & diff
  • Risk analysis before migration
  • Export-ready config packages
  • Migration project tracking
View Technical Details
Early Access
Comply

CompliBot

Upload a security questionnaire (Excel, CSV), and CompliBot answers it using your documentation via RAG. Weeks of work in hours.

  • Upload Excel/CSV questionnaires
  • RAG-powered answer generation
  • Knowledge base from your docs
  • Answer confidence scoring
  • Export completed questionnaires
  • Multi-framework support
View Technical Details
Early Access
Test

PentAGI

Orchestrate penetration tests with AI agents. Multi-agent system with sandboxed Docker execution and knowledge graph memory.

  • Multi-agent orchestration
  • Sandboxed Docker execution
  • pgvector knowledge base
  • Neo4j attack path graphs
  • Automated reporting
  • Gets smarter per engagement
Learn More
Early Access
Research

IntelBriefs

Pre-meeting intelligence, competitor scanning, and threat research. Deep research with 3-pass AI synthesis. 40+ source domains rated by credibility.

  • Quick & Deep research modes
  • 40+ source credibility scoring
  • Watchlist scheduler
  • Delta detection
  • Competitor scanning
  • Daily/weekly/monthly briefs
Learn More
Early Access
Consult

SecSuite

10-module security platform for consultants. Risk assessment, phishing simulation, compliance tracking, and engagement management in one place.

  • 10 security modules
  • Risk assessment
  • Phishing simulation
  • Compliance tracker
  • Engagement manager
  • Client-facing reports
Learn More
Early Access
Discover

NetMap

Scan your network with ARP, SNMP, and nmap. Auto-generate topology diagrams. One-click export to draw.io XML format.

  • ARP + SNMP + nmap scanning
  • Auto topology diagrams
  • draw.io XML export
  • Device classification
  • Interactive visualization
  • Unknown device detection
Learn More
Early Access
Assess

C3 Compliance

Assess your compliance posture across ISO 27001, GDPR, NIS2, PCI-DSS, AI Act, SOC 2, HIPAA, SOX, and DSGVO. AI-powered gap analysis with audit-ready evidence.

  • 9 regulatory frameworks
  • AI-powered gap analysis
  • Audit-ready reports
  • Continuous monitoring
  • Evidence generation
  • Risk scoring
Learn More

Modular, Not Monolithic

The Legacy Problem

  • Pay for 8 modules, use 2
  • 6–12 month implementation timelines
  • Closed-source, vendor-controlled deployment
  • Vendor lock-in by design
  • Annual contracts, no flexibility

The FwChange Approach

  • Use only the tools the workflow requires
  • Deploy in hours, not months
  • Self-hosted on EU infrastructure
  • Each tool is fully independent
  • Cancel anytime, no lock-in

Real-World Scenarios

MSP Client Onboarding

FwMigrate translates configs to your standard platform. FwChange handles ongoing changes. CompliBot completes the client's security questionnaire.

FwMigrateFwChangeCompliBot

PCI-DSS Audit Prep

FwChange provides the change audit trail. CompliBot auto-fills the QSA questionnaire. Two weeks of prep in one day.

FwChangeCompliBot

Vendor Migration

Migrating from Cisco to Palo Alto? FwMigrate translates your config with validation. FwChange tracks every change during cutover.

FwMigrateFwChange

Frequently Asked Questions

No. Each tool is a fully independent application with its own database, authentication, and deployment. The Suite is a curated portfolio of independent tools, not a monolithic platform. Deploy each tool where it makes sense — on-premise, cloud, or air-gapped.

FwMigrate and CompliBot are in active development as research prototypes within the FwChange methodology. FwChange itself is live and production-ready.

Tufin and Skybox ship monolithic platforms. The FwChange Suite is modular — each of the seven tools is an independent application. Architecture favours composability.

Each tool is designed as a standalone application. FwChange is the flagship; the other six supplement it for specific workflows (migration, compliance Q&A, pentesting, intel, full consultant platform, network mapping).

About This Suite

Seven security tools developed by Nicholas Falshaw as part of a 280+ enterprise firewall migration research program across DAX-30 and KRITIS-regulated environments. Each tool is an original technical contribution demonstrating AI-assisted security engineering.