Syntony / Tools / Attacca

Attacca
from attack to fix, without a pause

A free Chrome extension. Select a red team finding on any page and Attacca shows where it entered your AI pipeline, where the control belongs, who owns it and which frameworks apply, then writes the record for your ticket.

Download for Chrome Try it here

Live demo

The same panel, running in this page

This is the extension’s own side panel. Press Identify, change the class, copy the record. Nothing you type is sent anywhere.

How it works

  1. Select the finding

    Highlight a finding in Jira, GitHub, a red team report or an email, right-click and choose Map this finding to governance. Or paste it into the panel.

  2. Identify the vulnerability

    The panel matches the text against the fifteen vulnerability classes A440 tests for, from unauthorized actions to approver manipulation. You can override the match.

  3. See it in the pipeline

    Eight stages, from input to monitoring. The panel marks where the finding enters, where it travels and the stage where the control belongs.

  4. Get the governance record

    Control, owner, evidence to keep and the retest trigger, with candidate references to the OWASP LLM and Agentic Top 10, NIST AI RMF 1.0 and the EU AI Act.

  5. Take it with you

    Copy Markdown for the ticket or download JSON for your risk register. Send the draft to GovTune AI when the policy itself needs to change.

Why the name

Attacca
go on without a pause

In a musical score, attacca tells the players to go straight into the next movement with no break. It is also the Italian for “attack”.

That is the job. A red team finding is an attack. Too often it sits in a report while the governance work waits. Attacca carries it straight on: the stage it entered, the control that belongs there, the owner and the retest, in the same moment you read it.

It sits with the rest of our instruments: A440 sets the pitch, and Sordino mutes an action that should not happen.

Install

Four steps, two minutes

Version 1.0.0 for Chrome 116 or later, and other Chromium browsers with side panel support.

  1. Download and unzip

    syntony-attacca-1.0.0.zip ↓

  2. Open the extensions page

    Go to chrome://extensions and switch on Developer mode in the top right.

  3. Load it

    Click Load unpacked and choose the unzipped folder. Pin the Syntony icon to the toolbar.

  4. Map a finding

    Select any finding, right-click, and choose Map this finding to governance. The side panel opens with the result.

sidePanel

Shows the panel next to the page you are reading.

contextMenus

Adds the right-click entry for selected text.

storage

Keeps your last five findings on this device.

No host permissions, no content scripts and no network requests. The extension cannot read pages; it only receives text you select and send to it. Framework references are candidate mappings for review, not legal advice.

Need the control tested, not just mapped?

A440 runs the attack against your agent, checks the fix and exports the evidence. We aim to reply within two business days.

Request an A440 demoMore work you can check