VulnBoard is a Fischer Product Lab portfolio product for executive vulnerability risk reporting. It turns synthetic vulnerability data into a board-ready operating view of exposure, SLA pressure, remediation trends, owner accountability, exceptions, and business-unit risk.
Status: V1 live on Vercel and published to GitHub
Live demo: https://vuln-board.vercel.app/
Repository: https://github.com/Fischer-Product-Lab/VulnBoard
Portfolio: Fischer Product Lab
Demo posture: Read-only, synthetic data only, no production integrations
Fischer Product Lab is Trevor Fischer's portfolio of cyber, AI governance, trust, and operational risk product demos. The suite is designed to show practical product thinking, security judgment, executive communication, and secure-by-design delivery.
Related live demos:
| Product | Focus | Demo |
|---|---|---|
| VulnBoard | Vulnerability risk and executive remediation governance | https://vuln-board.vercel.app/ |
| AgentOps | AI operations and governance | https://agentops-fpl.vercel.app/ |
| TrustDesk | Trust, risk, assurance, and control evidence | https://trustdesk-fpl.vercel.app/ |
- Executive decision framing for vulnerability management
- High and critical finding visibility
- SLA debt, aging, and overdue exposure
- Remediation velocity and trend analysis
- Owner and business-unit accountability
- Application and infrastructure risk views
- Risk acceptance and exception watchlists
- Board-ready narrative and mock export actions
| Route | Purpose |
|---|---|
/ |
Fischer Product Lab portfolio landing page |
/dashboard |
Executive VulnBoard dashboard |
/findings |
Findings queue and vulnerability table |
/applications |
Highest-risk applications and assets |
/business-units |
Business-unit risk contribution |
/sla |
SLA health and aging buckets |
/remediation |
Leadership commitments and remediation tracker |
/exceptions |
Risk acceptance watchlist |
/reports |
Executive memo and report actions |
/about |
Demo overview, architecture, security posture, and docs |
VulnBoard is intentionally safe for a public portfolio demo:
- Synthetic mock data only
- No customer, employer, or production data
- No secrets, API keys, or environment variables
- No file uploads
- No write API routes or mutable workflows
- No AI calls in V1
- Static/read-only demo behavior
See SECURITY.md and docs/threat-model.md.
- Next.js 16 App Router
- React 19
- TypeScript
- Tailwind CSS 4
- Local typed synthetic data
- npm scripts
- Vercel-ready static build
Run from the local project folder:
cd "C:\Users\t_fis\dev\Vulnerability Dashboard"
npm install
npm.cmd run dev -- -p 3001Then open:
http://localhost:3001
npm.cmd run lint
npm.cmd run buildBoth should pass before publishing or deploying.
- Repository: https://github.com/Fischer-Product-Lab/VulnBoard
- Live demo: https://vuln-board.vercel.app/
- Deployment source: Vercel import from the GitHub
mainbranch
Recommended pre-publish checks for future changes:
npm.cmd run lint
npm.cmd run build