STRATA v0.3

STRATA — web security, in cross-section. A single-file, zero-dependency security lab that renders a vulnerable web app as a seven-layer cross-section: you watch your own payload travel the stack and become syntax, markup, or a decision — then flip to Defender and put it back together.

Try it

• Live demo — runs entirely in your browser.
• Or download strata.html below and open it. That one file is the whole app.

In this release

• The cross-section engine and the seven-plane instrument
• 17 built-in labs — Foundations + the full OWASP Top 10
• Attacker and Defender modes (10 labs flip to Defender)
• Virtual Burp-style intercept, honest engines (real SQL lexer, XSS scanner, IP canonicalizer, MD5, shell/path parsers)
• The lab format + validator + sandboxed community shelf, and docs/AI-LAB-BRIEF.md — hand it to an AI to generate new labs
• Optional CLI + four zero-dependency test suites, green in CI

No build step, no install, no accounts, no backend. Nothing is ever sent anywhere.

MIT licensed.