TechAtelier
PUBLIC ROADMAP

Building TechAtelier step by step.

This page presents the project's current priorities. Items may change based on user feedback, security needs and platform capacity.

Available

Protect foundations

  • Six technical toolsInfraCheck, ConfigCheck, DomainCheck, APICheck, DataCheck and PDFCheck cover the main technical risk areas.
  • Score historyTrack analyses, compare results and understand how a domain evolves over time.
  • Potential scoreImmediately see recoverable points and the fixes that will have the strongest impact.
  • Monthly reportsConsolidate scores, trends, analyses and alerts into a shareable summary that can be printed as a PDF.
  • Remediation centerTurn detected risks into readable actions, with evidence, recommendations and correction tracking.
  • Posture evidence packCombine current posture, the analysis timeline and correction evidence into an understandable document that can be exported as a PDF.
  • Temporary risk acceptanceDocument an exception with its rationale, responsible person and limited expiry date, then automatically reopen the risk when it expires.
  • Daily domain monitoringScheduled analyses, alerts when risks increase or a new high-priority informational risk appears, and automatic retries after technical errors.
  • Guided backup monitoringCreate a check in three steps, install a success signal and immediately identify a backup that is overdue.
  • Change detectionKeep a timeline of DNS, TLS and HTTP modifications, degradations and resolved issues.
  • Passive discovery and web dependenciesInventory subdomains, scripts and third-party domains visible through certificates, DNS and web pages, then flag changes without turning an incomplete collection into a false disappearance.
  • CVE matching and npm advisories in a pilotFor one test domain only, compare an observed server version with NVD references and an npm version declared in a script URL with OSV advisories. Show provenance, uncertainty and new identifiers between two complete analyses, outside the score and without dedicated alerts.
  • AI-assisted diagnosisSummarize audit results, explain likely causes and suggest actions in the language currently displayed by the interface.
  • HTTPS availability for discovered assetsCheck an asset on demand or enable automatic monitoring with explicit consent: 1 asset with Free, up to 10 shared across 3 domains with Pro. The first check runs on activation, then about every fifteen minutes, with status refreshed on the page. State-change history is available within each asset: ten latest entries, retained for up to thirty days. An HTTPS response does not prove that the service works correctly.
  • HTTPS asset alertsReceive mobile alerts for confirmed outages and recovery of monitored assets, with explicit consent and limited repetition. Automatic delivery and opening the asset details from a notification validated on iPhone for two test assets within the same monitored domain and account; operation at a larger scale remains to be measured.
  • Discovered asset rolesShow API or service suggestions with their supporting evidence, confirm or remove a role and retain it across visits, in a list adapted to desktop and mobile. A role does not prove availability.
  • Self-service public APICreate an API key from an account, run analyses through the versioned API and track quotas without requesting manual access.
  • Advanced DNS and exposure checksVerify authoritative DNS transport over IPv4/IPv6 and identify risky CNAME chains, including multi-hop exposures documented by ALIASLEAP.
  • iOS and Android mobile appTechAtelier Protect is available on the App Store and Google Play to follow domains from iPhone or an Android device.
  • Sentinel and Protect DevicesAvailability checks, expected-content verification, backup monitoring and lightweight device coverage depending on configuration.
  • Passive network inventoryIdentify devices already observed by a Local device, name them and link them, without active scanning. This collection remains unavailable for Server profiles.
  • Device health summaryClearly distinguish a healthy device, one to watch, one needing action or an unavailable device, without presenting preventive signals as blocking alerts.
  • Recent trendsCompare recent disk, memory, temperature and latency measurements directly in the device details.
  • Extended indicator historyKeep trends over a longer period to better identify gradual changes and capacity needs.
  • Per-device alert preferencesChoose more precisely which events should trigger a notification based on each device's role and importance.
  • Maintenance modeTemporarily silence a device during planned work without losing monitoring or historical data.
  • Alert groupingCombine simultaneous events related to the same device to reduce noise and make incidents easier to read.
  • Internet exposure viewSummarize public DNS, TLS, HTTP and e-mail signals from the latest audits to quickly identify an area that needs attention.
  • Bilingual resourcesGuides, articles, French and English pages to support checking, monitoring and fixing.
Coming soon

Consolidate posture

  • HTTPS validation at a larger scaleMeasure load, delays and monitoring and alert noise across multiple assets and accounts, then confirm behaviour over time. Isolated tests cover ten Pro assets shared across three domains; real checks have been observed across five monitoring schedules and two accounts, and alerts on two test assets within the same monitored domain and account.
Next

Expand protection

  • Expand vulnerability monitoringMeasure false positives and pilot readability before considering other domains, proactive reassessment of historical observations and grouped alerts. A match does not prove that a service is vulnerable.
  • Optional active network discoveryExplore a more complete inventory, explicitly enabled and run by a strictly limited local relay, without making the main agent privileged.
  • Multi-region monitoringCompare availability from several checkpoints to separate local outages, network issues and real incidents.
  • Incident correlationConnect alerts, changes, availability and exposure in one view to better understand an incident.
  • Optional context integrationsExplore explicit connections to GitHub, Cloudflare or similar services to enrich posture without making the public audit dependent on one provider.
  • Measurable web sobrietyMeasure transferred page weight, request count, third-party resources, compression, caching and images to identify technical waste without presenting artificially precise carbon estimates.
Our vision

Prevent before reacting

  • PredictionDetect early signals that may announce a score drop, expiration or increased exposure.
  • Continuous protectionConnect analysis, monitoring, remediation and reports to move from one-off audits to ongoing follow-up.
  • Independent postureKeep the assessment useful regardless of the hosting, CDN or security provider in use.
  • Real-risk prioritizationCombine severity, Internet exposure, known exploitation, asset role and observed signals so the most urgent fixes rise above raw-score ordering.
  • Usage-guided improvementsPrioritize what truly helps users without announcing artificial deadlines.
YOUR FEEDBACK MATTERS

Which priority would help you most?

Feedback helps select future features without making premature delivery promises.

Suggest an idea