Abuse & Threat Simulation

Prove your bot defenses with safe, production‑realistic abuse simulation

Design scenarios, generate plans, run them, and review artifacts—without hand‑editing JSON everywhere. Ship with a visual UI console, an agentic orchestrator (MVP), and a CLI that fits CI/CD.

View on GitHub Read the docs Open source • Local‑first • Safe by design
15m
to first simulation
UI + CLI
one workflow
Artifacts
CSV • JSON • JUnit

Why Proofant

Purpose‑built to validate real defenses, not just create pretty graphs.

Agentic orchestrator (MVP)

Coordinates scenario generation, applies limits, runs variants, and stops gracefully.

UI + CLI

Design scenarios and plans visually, or drive everything from the CLI for CI/CD.

Safe by design

Guardrails and a local test app let you exercise flows without touching real users or payments.

Controls validation

Measure impact on WAF, rate limits, bot defenses, auth, and risk engines with artifacts you can diff over time.

Scheduling & Scorecards

Automate recurring runs, export CSV/JSON/JUnit, and gate deploys with thresholds.

Open source

Fork it, extend it, and help shape the roadmap. Contribute on GitHub.

Quickstart (UI + CLI + Demo Test App)

# 1) Clone
git clone https://github.com/francoxlam/proofant
cd proofant

# 2) Create a venv & install
python -m venv .venv && source .venv/bin/activate  # Windows: .venv\Scripts\activate
pip install -r requirements.txt  # or: pip install fastapi uvicorn flask

# 3) Start the demo target (test app)
# The app exposes /login, /dashboard, /account and sets CSRF/session cookies.
uvicorn app:app --port 9001 --reload

# 4) Start the UI console (local only)
python webui.py
# open http://127.0.0.1:8008

# 5) Create a scenario → generate a plan → run
# See Docs → Quickstart for screenshots and details.

Start proving your defenses

Open source • Local‑first workflow • UI + CLI

View on GitHub Read the docs