featkpr Private demo

featkpr maps your web app and tests its permissions as the wrong user.

It reads the code, opens every screen and writes the tests itself. Here it is on BookStack, an open-source wiki we don't own.

  1. code read 343routes
  2. features named 307features
  3. screens crawled 167screens
  4. paths drafted 163paths
  5. tests run 304pass
  6. wrong-user check 269refused to the wrong user
BookStack: all six steps run once, and 605 things featkpr missed, listed in the report.
featkpr's Runs screen for BookStack: every test in the last run, with the wrong-user check for eachRuns, in featkpr: every test, what it sent, what came back

Each test runs twice: once with permission, once without.

  1. sign in
  2. open the shelf
  3. send the new book
as an Editorallowed to create bookspassed302, on to the shelf
as a readercan read, can't createrefused, as it should besent back to the home page
One test, run twice: it passes for the Editor and is refused to the reader.

For an app that has grown past what anyone can list.

featkpr names what it does, drafts how people use it and proves the tests, so a change can't quietly open a door. What it does for your app →

The library

BookStackopen-source wiki 307 features in 12 modules · 163 paths to 69 goals · 304 tests pass, 269 refused to the wrong user · 605 of 2,372 missed in the missed-items check
featkpr itselfthis product, on its own code dogfooding stage 1 built: 26 of its own screens entered as planned rows · reading its own merge requests, crawling and testing itself are planned

All 25 products in the library →

Next on the route

A crawl that edits and deletes what it madereleased as a draft after approval
The goal ledgera goal's identity and 3 kinds of event
Effects in every runWeek 1 · from 5 Oct
Release flow and a Kargo planWeek 2 · from 12 Oct

The roadmap →

See it on BookStack, privately

A live walkthrough first, then read-only access once invites exist.

Ask for a private demo