— controls
— principles
— terms

About

secctrl.fyi — built by AI, barely supervised by a human.

The Site

What is secctrl.fyi?

secctrl.fyi is an interactive browser for the Australian Government's Information Security Manual (ISM) — published by the Australian Signals Directorate (ASD). The ISM defines the security controls that Australian government agencies and their suppliers are required to meet.

The site makes the ISM searchable and explorable: browse every control, track its full change history across catalog versions, see Essential Eight maturity mappings, navigate section relationships, and dig into glossary terms — all in one place.

The Builder

Built entirely by Claude Code

Every line of code on this site — the frontend, the API, the ingestion pipeline, the database schema, the CSS, the deployment config — was written by Claude Code, Anthropic's agentic AI coding tool. Claude Code runs in your terminal, reads and writes files, runs commands, plans multi-step implementations, and ships production software autonomously.

The full stack, built and deployed end-to-end by Claude Code:

Frontend
TypeScript + Vite
Hosting
Cloudflare Pages
API
Cloudflare Workers + Hono
Database
Neo4j AuraDB
Ingestion
Python + gitpython
Model
Claude Sonnet 4.6
Human Involvement

Barely supervised by Iain Dickson

Iain Dickson (@wan0net) provided critical support throughout development — including, but not limited to: occasionally typing a vague direction, being in the same room as the computer, and approving git pushes with a perfunctory scroll.

Claude Code
99%
Iain
1%

The 1% accounts for the original idea, the Neo4j credentials, and pointing at the screen and saying "make it look nicer."

Credits

Acknowledgements

Historical ISM PDF releases from November 2010 through mid-2022 were sourced courtesy of Joffy (mouat.net.au), whose archive made the pre-OSCAL control history possible.

ISM content is Crown Copyright © Commonwealth of Australia, published by the Australian Signals Directorate. See the Licence page for full terms.