News

Building CyvoraX Suite: An Open-Source Web Security & Penetration Testing Workbench

How I'm building a modern Java + Netty-powered security workbench with AI and polyglot native engines.

Jojin John

Open Source Software Developer & Cybersecurity Researcher

July 30, 2026·

1 min read

Article

🚀 CyvoraX Suite is still under active development, and community feedback is incredibly valuable.

Whether you're a Java developer, security researcher, Rust or Go developer, UI/UX designer, or simply interested in open-source security tooling, I'd love to hear your ideas and contributions.

⭐ GitHub:

https://github.com/jojin1709/CyvoraX-Suite

🌐 Website:

https://jojin1709.github.io/CyvoraX-Suite/

If you have suggestions, feature requests, or would like to contribute, feel free to open an issue or submit a pull request.

Comments(2)

Join the discussion by logging into your account.

Hiroshi Tanaka

2 months ago

Hello! I really enjoyed reading your post. Regarding the project currently underway, could we communicate via the following contact details? Telegram: @bytepil0t WhatsApp: +1 (910) 852-7435

ZyVOP

2 months ago

Hi Jojin, welcome to ZyVOP. I checked the repo not in deep but seems very promising. Good luck 🤞

Jojin John

Open Source Software Developer & Cybersecurity Researcher

I'm an open-source developer and cybersecurity researcher passionate about building modern security tools. Currently building CyvoraX Suite, an open-source web security & penetration testing workbench featuring a high-performance Java + Netty core, AI-assisted workflows, and polyglot native integrations. My interests include application security, bug bounty, Java, Rust, Go, and developer tooling. Always open to feedback and collaboration on open-source projects.

Subscribe to Jojin John's Newsletter

Direct email dispatches when new stories are published. Zero algorithms.

Trending on ZyVOP

Why I Crosspost Across Medium, Dev.to, DZone, and ZyVop (And How to Choose)

My take on “tech blogging” sites! When it comes to sharing technical knowledge, tutorials, and...

Alain Airom (Ayrom)·

2 minOct 23

Subpath Imports With #/: The Path Alias Node Actually Understands

Node 24.14 and TypeScript 6.0 finally allow a bare #/ prefix in package.json imports. Here's how to replace tsconfig paths, Vite aliases, and post-build rewrites with one alias every tool reads.

Danny Holloran·

4 minOct 23

I Built the Smallest LLM I Could to Understand How They Work

I use LLMs every day without knowing how they work, so I built the smallest one I could: a tiny transformer that writes Shakespeare one character at a time. This post walks through tokenizing, attention, training and sampling, with the full code to run yourself.

Shobit Singh·

9 minOct 23

Claude Opus 5.5 and Sonnet 5.5: When a Lower Price per Token Costs More

Anthropic's October 2026 rate card is lower than the previous generation on Opus and Sonnet, but a cheaper token is not a cheaper task. The arithmetic on the published rates, what a tokenizer change does to the same document, why cache writes belong in a migration plan, and what the numbers still cannot settle.

xiaoying zhou·

7 minOct 23

Next.js 16.4.0 Has a Known Security Vulnerability: Here’s How to Fix It

If your terminal says Next.js 16.4.0 has a known security vulnerability, believe it. Two remote-code-execution bugs and a DoS issue were fixed in 16.4.1, and 16.4.2 is the current patch. Here’s what’s affected and how to upgrade.

Anshu Pathak·

4 minOct 23