🔐 mTLS Service Mesh: Lateral Movement

Compromise one microservice in a small service-mesh topology and watch the breach try to spread. In implicit-trust mode the compromised service freely calls and pivots into every other service on the internal network. Switch on mTLS + service-mesh allow-lists and the same starting compromise is only accepted by services it has a genuine caller-callee relationship with — every unauthorized call is cryptographically rejected, visibly containing the breach, with a live compromised-service count comparing both modes for the identical starting point.

3D · Three.js / WebGL renderer · 60 FPS target · runs fully client-side, no install