Flask-Aegis Playground v{{ version }}

Test every attack class Flask-Aegis detects, live, against a real (contained) vulnerable sink. Each card sends the identical payload to an unprotected route and an @aegis.protect(...)-wrapped route, so you can see the difference directly. Toggle "Protected" and hit Run.

Local testing only — do not expose this app publicly. What's real vs. simulated per attack class (SQLi runs against in-memory SQLite, traversal is sandboxed, command injection and XXE resolution are simulated rather than executed) is documented in flask_aegis/playground/attacks.py.
{{ attacks|length }} of {{ attacks|length }} shown
{% for attack in attacks %}

{{ attack.name }}

{{ attack.rule_id }} · {{ attack.category }}
{{ attack.severity }}

{{ attack.description }}

Fix: {{ attack.mitigation }}

{% endfor %}

Flask-Aegis · every card above corresponds to a rule in flask aegis rules. Run flask aegis routes in your own app to see which of these policies are active on which routes, and flask aegis audit to check your configuration for common mistakes.