01Change Detection v1
PlannedCompare trusted previous state with current state and create meaningful change events.
Next engineering focus
What I’m Building Next
Redirect Intelligence v1 is the approved next unit of work, followed by change intelligence and — much later — narrowly governed agentic research.
Approved Next
Redirect Intelligence v1
Approved NextDeterministic redirect evidence with safe outbound request design.
- Safe HTTP/HTTPS and apex/www redirect assessment.
- Store every redirect hop and final destination.
- Detect external redirects, HTTPS-to-HTTP downgrade, loops, and excessive chains.
- Strict SSRF protections against private, loopback, link-local, reserved, metadata, and unsafe destinations.
- Conditional enrichment only for suspicious external indicators.
- Deterministic risk calculation; AI explains but does not establish evidence.
- Trusted redirect baseline; failed checks never replace it.
Planned enrichment providers
VirusTotalURLhausAlienVault OTXAbuseIPDB (IP indicators)RDAP / domain registration dataDNS contextTLS / certificate context
All enrichment providers listed above are planned. None are currently live in OrdoAI.
Roadmap
After Redirect Intelligence
Sequenced work following Redirect Intelligence v1. Status labels are exact.
02DNS / TLS / Technology change intelligence
PlannedExtend change intelligence across DNS records, certificates, and detected technologies.
03Notification and alerting
PlannedSurface security-significant changes while reducing alert fatigue.
04AI investigation assistant
PlannedExplain findings, summarize changes, and recommend remediation using stored evidence.
05Agentic security workflows
FutureNarrow, governed agents for specific tasks such as suspicious redirect investigation or indicator correlation.
06Agentic attack surface
FutureResearch around llms.txt / agent-facing instructions, package references, MCP endpoints, and external trust relationships.