Pathwick - Static security analyzer for architecture diagrams

[Lendgale]

Hi all!

We built Pathwick, an open-source tool that statically analyzes architecture diagrams for security problems at design time. Because diagrams produces a clean, parseable description of a system's topology, it turned out to be an ideal input - we parse the diagram and reason about the structure to flag things like:

-databases reachable from the internet with nothing in front
-storage with no access layer
-load balancers exposed without a WAF
-compute with no protection or auth

It runs in seconds, needs no cloud credentials or deployment. The idea is to catch structural mistakes while they're still just a diagram, before any infrastructure exists.
It's early and honest about its limits - it catches a specific class of topology issues, not a full security review. We'd genuinely value feedback from people who use diagrams seriously, especially where it gets things wrong or misreads a pattern.

Check it out here: https://github.com/Outpost-Zero/pathwick

Thanks!