Hi! I’m Grzegorz “siewer” Siewruk — a security engineer and lecturer building Mixeway Flow, an open-source aggregator & orchestrator for vulnerability management that powers next-gen DevSecOps.

Mixeway Flow connects your security tools (SAST, SCA, IaC, Secrets, Container, SBOM) and threat-intel (KEV, EPSS, exploit-exists) into one pipeline-aware brain. It normalizes, deduplicates, prioritizes, and routes findings so engineering teams can fix what matters first.

Why sponsor?

• Accelerate the roadmap for features the community asks for most.
• Keep it open: no paywall for core capabilities used by startups, students, and non-profits.
• Make DevSecOps practical: fewer dashboards, more decisions, real remediation.

What I’m building (highlights)

*Unified ingestion & normalization across SAST/SCA/IaC/Secrets/Container scanners

• Risk-based prioritization with EPSS, KEV, exploit signals, asset criticality, and context
• Policy-as-Code: suppression rules & governance at global/team/project levels
• CI/CD orchestration (GitHub Actions, GitLab, Jenkins) with fail-the-build guardrails
• Developer workflow: PR annotations, dedup/merge, smart triage, assignment & SLAs
• Dashboards for leadership and teams: trends, MTTR, coverage, backlog health
• SBOM/AIBOM import and correlation for supply-chain risk
• APIs & webhooks to integrate with issue trackers and chat tools