CagliostroFree tools and notes for privacy, security, and AI governance work.

Cagliostro was an eighteenth-century alchemist who went around Europe selling elixirs and secret societies he made up himself. I have been fascinated by him for years, so I named this after him.

Repository of tools I build for data protection and security work, and the occasional note when something is worth writing down. Free to use.

It is meant to be a place to talk, too. If you work in this field, or are just trying to make sense of it, I would rather hear from you than not. Including when the tools are wrong.

works

Tools, templates and scripts. Each one exists because I needed it. They are published on github.

  • traccia

    Scans a website and draws which third-party services it sends personal data to, and who answers for them.

    Rust
  • norma

    Carries an ISO 27001, NIS2 or ISO 42001 project from control assessment to risk register, Statement of Applicability and evidence.

written notes live in /blog