SiteShadow

Independent project

The people building SiteShadow.

SiteShadow exists because security feedback has spent too long arriving late, noisy, or disconnected from the way developers actually work. It runs security analysis as fast as spell check, inside Cursor, VS Code, the CLI, and CI, so risky code can be found while it is still cheap to understand and fix.

SiteShadow is an independent ElBato project focused on developer-first application security tooling.

Michael Wilson

Creator and builder

Michael has spent more than 28 years in cybersecurity and IT, but the concern started before clients were paying him for it. In the early web era, curiosity meant looking for odd little holes in systems like Yahoo Mail and Hotmail, and learning how quickly a clever feature could become a security problem. It was not theory. The web was moving fast, and security was not keeping up.

When clients started paying him to build dynamic websites, the pattern repeated: everyone wanted logins, sessions, user data, and new features, but too few people were thinking deeply about how those systems failed. Michael built practical ways to protect authenticated sessions, validate data, and close the basic holes that others were not yet treating as urgent. Many of those ideas are common practice now. At the time, they came from necessity.

SiteShadow is the product of that same mindset. It integrates natively with Cursor and VS Code, runs as fast as spell check, and uses accurate static analysis and taint tracking to find real risk without burying developers in noise. If code is safe, SiteShadow stays quiet. If it is not, it shows what happened, why it matters, and how to fix it before it becomes someone else's problem.

Mirian Wilson

Partnerships and operations

Mirian built a successful commercial real estate career in Colorado, where the work is high stakes, long-cycle, and grounded in contract negotiation under real pressure. Commercial real estate maps cleanly to complex software organizations: multi-stakeholder approval chains and lease and purchase contracts demand patient, precise coordination. She brings that foundation to SiteShadow's partnerships and operations.

SiteShadow is a build-and-partnership project. Michael builds the scanner, Mirian connects it with the teams who need it, and the two halves were designed to fit together from day one.

Project context

SiteShadow is an ElBato project.

ElBato provides the operating and governance framework behind SiteShadow. SiteShadow remains focused on developer-first application security tooling within that wider body of work.

Why we built it

We believe secure code development has to become part of the moment code is written, not a separate event that happens after the work is already moving toward production. A scanner that takes minutes, floods developers with false alarms, or surfaces findings after context is gone will simply be ignored. SiteShadow is built to be the opposite: native to the developer workflow, quiet on safe code, accurate enough to trust, and as fast as spell check.

SiteShadow is an independent project built by Michael and Mirian. Mirian is Hispanic and a member of a minority community. Michael is a 100% disabled veteran. SiteShadow is free: create an account with Google sign-in using a compatible verified email.