Contributing to SWG Audit

SWG Audit is open source because the tests should be inspectable. If a simulation is unclear, unsafe, inaccurate, or missing an important bypass pattern, contributions are welcome.

How to contribute

Report an issue

Open an issue with the affected page, expected behavior, actual behavior, browser/SWG context, and screenshots or logs when useful. Do not include secrets or sensitive data.

Submit a change

1. Fork the repository.
2. Create a focused branch.
3. Keep the simulation safe, transparent, and scoped.
4. Test the affected page or mechanism.
5. Open a pull request with a short explanation.

Add or improve a test

Every test should explain the threat, the mechanism, pass criteria, fail criteria, and safe-use limits. Do not add real malware, credential theft, or uncontrolled exfiltration.

Safety standard

Good contributions make attacker techniques understandable without making the site harmful. Prefer dummy data, EICAR, controlled endpoints, and visible source code.