diff --git a/.github/workflows/documentation.yml b/.github/workflows/documentation.yml
index b0b7e03..7fc4f21 100644
--- a/.github/workflows/documentation.yml
+++ b/.github/workflows/documentation.yml
@@ -21,7 +21,7 @@ jobs:
       - name: Checkout threatmap
         uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
-          repository: threatmap/threatmap
+          repository: threatcode/threatmap
           ref: ${{ env.THREATMAP_REF }}
           path: ./threatmap
           token: ${{ env.THREATMAP_GITHUB_TOKEN }}
diff --git a/.github/workflows/publish-release-github.yml b/.github/workflows/publish-release-github.yml
index e961383..6fc7a6e 100644
--- a/.github/workflows/publish-release-github.yml
+++ b/.github/workflows/publish-release-github.yml
@@ -37,7 +37,7 @@ jobs:
       - name: Checkout immutable release tag
         uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
-          repository: threatmap/threatmap
+          repository: threatcode/threatmap
           ref: ${{ env.RELEASE_REF }}
           fetch-depth: 0
           fetch-tags: true
diff --git a/.github/workflows/publish-release.yml b/.github/workflows/publish-release.yml
index 9aa85e1..42bd76c 100644
--- a/.github/workflows/publish-release.yml
+++ b/.github/workflows/publish-release.yml
@@ -37,7 +37,7 @@ jobs:
       - name: Checkout immutable release tag
         uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
-          repository: threatmap/threatmap
+          repository: threatcode/threatmap
           ref: ${{ env.RELEASE_REF }}
           fetch-depth: 0
           fetch-tags: true
diff --git a/knip.config.ts b/knip.config.ts
index 506dfd9..053c8fe 100644
--- a/knip.config.ts
+++ b/knip.config.ts
@@ -11,8 +11,10 @@ const config: KnipConfig = {
     "packages/sdk/sdk-workflow/**",
     "packages/ui/tokens/src/__generated__/**",
     "packages/ui/tokens/src/vendor/**",
+    "packages/plugins/*/backend/src/types.ts",
   ],
   workspaces: {
+
     "packages/sdk/sdk-client": {
       project: ["src/**/*.ts!", "tests/**/*.ts!"],
       ignore: ["src/**/__generated__/**"],
diff --git a/packages/plugins/autorize/backend/src/api/index.ts b/packages/plugins/autorize/backend/src/api/index.ts
new file mode 100644
index 0000000..bb858f9
--- /dev/null
+++ b/packages/plugins/autorize/backend/src/api/index.ts
@@ -0,0 +1,155 @@
+import type {
+  RequestResponseResult,
+  TemplateExportData,
+} from "../../../src/export.js";
+import type { APIResult, Config, Template } from "../../../src/index.js";
+import type { AutorizeStore } from "../stores/autorizeStore.js";
+import type { BackendSDK } from "../types.js";
+
+const ok = <T>(value: T): APIResult<T> => ({ kind: "Ok", value });
+const err = <T>(error: string): APIResult<T> => ({ kind: "Error", error });
+
+export const apiGetTemplates =
+  (store: AutorizeStore) => (): APIResult<Template[]> =>
+    ok(store.listTemplates());
+
+export const apiGetTemplate =
+  (store: AutorizeStore) =>
+  (_sdk: BackendSDK, id: number): APIResult<Template> => {
+    const template = store.getTemplate(id);
+    return template === undefined
+      ? err(`Template ${id} not found`)
+      : ok(template);
+  };
+
+export const apiCreateTemplate =
+  (store: AutorizeStore) =>
+  async (sdk: BackendSDK, requestID: string): Promise<APIResult<Template>> => {
+    const template = store.createTemplate(requestID);
+    sdk.api.send("template:created", template);
+    return ok(template);
+  };
+
+export const apiDeleteTemplate =
+  (store: AutorizeStore) =>
+  (sdk: BackendSDK, templateId: number): APIResult<void> => {
+    if (!store.deleteTemplate(templateId)) {
+      return err(`Template ${templateId} not found`);
+    }
+    sdk.api.send("template:deleted", templateId);
+    return ok(undefined);
+  };
+
+export const apiDeleteTemplates =
+  (store: AutorizeStore) =>
+  (sdk: BackendSDK, templateIds: number[]): APIResult<number> => {
+    const count = store.deleteTemplates(templateIds);
+    for (const id of templateIds) {
+      sdk.api.send("template:deleted", id);
+    }
+    return ok(count);
+  };
+
+export const apiUpdateConfig =
+  (store: AutorizeStore) =>
+  (sdk: BackendSDK, config: Partial<Config>): APIResult<void> => {
+    const updated = store.updateConfig(config);
+    if (updated === undefined) {
+      return err("No active project configuration");
+    }
+    return ok(undefined);
+  };
+
+export const apiGetConfig = (store: AutorizeStore) => (): APIResult<Config> => {
+  const config = store.getConfig();
+  return config === undefined
+    ? err("No active project configuration")
+    : ok(config);
+};
+
+export const apiRerunTemplate =
+  (store: AutorizeStore) =>
+  (sdk: BackendSDK, templateId: number): APIResult<void> => {
+    const template = store.getTemplate(templateId);
+    if (template === undefined) {
+      return err(`Template ${templateId} not found`);
+    }
+    sdk.api.send("template:updated", templateId, template);
+    return ok(undefined);
+  };
+
+export const apiClearQueue =
+  (store: AutorizeStore) =>
+  (sdk: BackendSDK): APIResult<void> => {
+    store.clearQueue();
+    sdk.api.send("queue:status-changed", false);
+    return ok(undefined);
+  };
+
+export const apiGetRequestResponse =
+  (_store: AutorizeStore) =>
+  async (
+    _sdk: BackendSDK,
+    _requestId: string,
+  ): Promise<APIResult<RequestResponseResult>> =>
+    err("Request retrieval is not available in this environment");
+
+export const apiClearAllTemplates =
+  (store: AutorizeStore) =>
+  (sdk: BackendSDK): APIResult<void> => {
+    store.clearTemplates();
+    sdk.api.send("templates:cleared");
+    return ok(undefined);
+  };
+
+export const apiRescanAllTemplates =
+  (_store: AutorizeStore) =>
+  (_sdk: BackendSDK): APIResult<void> =>
+    ok(undefined);
+
+const matchesQuery = (haystack: string, query: string): boolean =>
+  query.length === 0 || haystack.includes(query);
+
+export const apiFilterTemplate =
+  (store: AutorizeStore) =>
+  async (
+    _sdk: BackendSDK,
+    httpqlQuery: string,
+    templateId: number,
+  ): Promise<APIResult<boolean>> => {
+    const template = store.getTemplate(templateId);
+    if (template === undefined) {
+      return err(`Template ${templateId} not found`);
+    }
+    return ok(matchesQuery(template.request.url, httpqlQuery));
+  };
+
+export const apiFilterTemplates =
+  (store: AutorizeStore) =>
+  async (_sdk: BackendSDK, httpqlQuery: string): Promise<APIResult<number[]>> =>
+    ok(
+      store
+        .listTemplates()
+        .filter((template) => matchesQuery(template.request.url, httpqlQuery))
+        .map((template) => template.id),
+    );
+
+export const apiGetTemplatesExportData =
+  (store: AutorizeStore) =>
+  async (
+    _sdk: BackendSDK,
+    templateIds: number[],
+  ): Promise<APIResult<TemplateExportData[]>> =>
+    ok(
+      templateIds
+        .map((id) => store.getTemplate(id))
+        .filter((template): template is Template => template !== undefined)
+        .map((template) => ({
+          id: template.id,
+          method: template.request.method,
+          url: template.request.url,
+          baseline: undefined,
+          mutatedResults: [],
+          noAuth: { data: undefined, access: undefined },
+        })),
+    );
diff --git a/packages/plugins/autorize/backend/src/index.ts b/packages/plugins/autorize/backend/src/index.ts
new file mode 100644
index 0000000..c69a14b
--- /dev/null
+++ b/packages/plugins/autorize/backend/src/index.ts
@@ -0,0 +1,42 @@
+import {
+  apiClearAllTemplates,
+  apiClearQueue,
+  apiCreateTemplate,
+  apiDeleteTemplate,
+  apiDeleteTemplates,
+  apiFilterTemplate,
+  apiFilterTemplates,
+  apiGetConfig,
+  apiGetRequestResponse,
+  apiGetTemplate,
+  apiGetTemplates,
+  apiGetTemplatesExportData,
+  apiRerunTemplate,
+  apiRescanAllTemplates,
+  apiUpdateConfig,
+} from "./api/index.js";
+import { setSDK } from "./sdk.js";
+import { createAutorizeStore } from "./stores/autorizeStore.js";
+import type { BackendSDK } from "./types.js";
+
+export async function init(sdk: BackendSDK): Promise<void> {
+  setSDK(sdk);
+
+  const store = createAutorizeStore();
+
+  sdk.api.register("getTemplates", apiGetTemplates(store));
+  sdk.api.register("getTemplate", apiGetTemplate(store));
+  sdk.api.register("createTemplate", apiCreateTemplate(store));
+  sdk.api.register("deleteTemplate", apiDeleteTemplate(store));
+  sdk.api.register("deleteTemplates", apiDeleteTemplates(store));
+  sdk.api.register("updateConfig", apiUpdateConfig(store));
+  sdk.api.register("getConfig", apiGetConfig(store));
+  sdk.api.register("rerunTemplate", apiRerunTemplate(store));
+  sdk.api.register("clearQueue", apiClearQueue(store));
+  sdk.api.register("getRequestResponse", apiGetRequestResponse(store));
+  sdk.api.register("clearAllTemplates", apiClearAllTemplates(store));
+  sdk.api.register("rescanAllTemplates", apiRescanAllTemplates(store));
+  sdk.api.register("filterTemplate", apiFilterTemplate(store));
+  sdk.api.register("filterTemplates", apiFilterTemplates(store));
+  sdk.api.register("getTemplatesExportData", apiGetTemplatesExportData(store));
+}
diff --git a/packages/plugins/autorize/backend/src/sdk.ts b/packages/plugins/autorize/backend/src/sdk.ts
new file mode 100644
index 0000000..2ba415d
--- /dev/null
+++ b/packages/plugins/autorize/backend/src/sdk.ts
@@ -0,0 +1,7 @@
+import type { BackendSDK } from "./types.js";
+
+let sdk: BackendSDK | undefined;
+
+export const setSDK = (value: BackendSDK): void => {
+  sdk = value;
+};
diff --git a/packages/plugins/autorize/backend/src/stores/autorizeStore.ts b/packages/plugins/autorize/backend/src/stores/autorizeStore.ts
new file mode 100644
index 0000000..ec1b619
--- /dev/null
+++ b/packages/plugins/autorize/backend/src/stores/autorizeStore.ts
@@ -0,0 +1,67 @@
+import type { Config, Template } from "../../../src/index.js";
+
+export type AutorizeStore = {
+  getConfig(): Config | undefined;
+  updateConfig(config: Partial<Config>): Config | undefined;
+  listTemplates(): Template[];
+  getTemplate(id: number): Template | undefined;
+  createTemplate(requestID: string): Template;
+  deleteTemplate(id: number): boolean;
+  deleteTemplates(ids: number[]): number;
+  clearTemplates(): number;
+  clearQueue(): void;
+  queueActive: boolean;
+};
+
+const clone = <T>(value: T): T => JSON.parse(JSON.stringify(value)) as T;
+
+export const createAutorizeStore = (): AutorizeStore => {
+  let config: Config | undefined;
+  let templates: Template[] = [];
+  let nextId = 1;
+  const store: AutorizeStore = {
+    queueActive: false,
+    getConfig: () => (config === undefined ? undefined : clone(config)),
+    updateConfig: (updates) => {
+      config =
+        config === undefined
+          ? undefined
+          : ({ ...config, ...updates } as Config);
+      return config === undefined ? undefined : clone(config);
+    },
+    listTemplates: () => clone(templates),
+    getTemplate: (id) => {
+      const template = templates.find((candidate) => candidate.id === id);
+      return template === undefined ? undefined : clone(template);
+    },
+    createTemplate: (requestID) => {
+      const template: Template = {
+        id: nextId++,
+        key: `template-${nextId}`,
+        request: { id: requestID, method: "GET", url: `/${requestID}` },
+        results: [],
+      };
+      templates = [...templates, template];
+      return clone(template);
+    },
+    deleteTemplate: (id) => {
+      const before = templates.length;
+      templates = templates.filter((template) => template.id !== id);
+      return templates.length < before;
+    },
+    deleteTemplates: (ids) => {
+      const before = templates.length;
+      templates = templates.filter((template) => !ids.includes(template.id));
+      return before - templates.length;
+    },
+    clearTemplates: () => {
+      const count = templates.length;
+      templates = [];
+      return count;
+    },
+    clearQueue: () => {
+      store.queueActive = false;
+    },
+  };
+  return store;
+};
diff --git a/packages/plugins/autorize/backend/src/types.ts b/packages/plugins/autorize/backend/src/types.ts
new file mode 100644
index 0000000..0bf2714
--- /dev/null
+++ b/packages/plugins/autorize/backend/src/types.ts
@@ -0,0 +1,5 @@
+import type { SDK } from "threatmap:plugin";
+
+import type { Spec } from "../../src/index.js";
+
+export type BackendSDK = SDK<Spec>;
diff --git a/packages/plugins/autorize/frontend/src/index.ts b/packages/plugins/autorize/frontend/src/index.ts
new file mode 100644
index 0000000..be10b1d
--- /dev/null
+++ b/packages/plugins/autorize/frontend/src/index.ts
@@ -0,0 +1,18 @@
+import { SettingsSlot } from "@threatmap/sdk-frontend";
+
+import { createSettingsSlotContent } from "../../src/ui/index.js";
+
+import type { FrontendSDK } from "./types.js";
+
+export type { FrontendSDK } from "./types.js";
+export { SettingsView } from "./views/SettingsView.js";
+
+export const init = (sdk: FrontendSDK): void => {
+  sdk.settings.addToSlot(
+    SettingsSlot.PluginsSection,
+    createSettingsSlotContent(),
+  );
+  sdk.sidebar.registerItem("Autorize", "/autorize", {
+    icon: "fas fa-shield-alt",
+  });
+};
diff --git a/packages/plugins/autorize/frontend/src/types.ts b/packages/plugins/autorize/frontend/src/types.ts
new file mode 100644
index 0000000..99b052c
--- /dev/null
+++ b/packages/plugins/autorize/frontend/src/types.ts
@@ -0,0 +1,5 @@
+import type { API as FrontendAPI } from "@threatmap/sdk-frontend";
+
+import type { Spec } from "../../src/index.js";
+
+export type FrontendSDK = FrontendAPI<Spec, Spec["events"]>;
diff --git a/packages/plugins/autorize/frontend/src/views/SettingsView.ts b/packages/plugins/autorize/frontend/src/views/SettingsView.ts
new file mode 100644
index 0000000..0b532f6
--- /dev/null
+++ b/packages/plugins/autorize/frontend/src/views/SettingsView.ts
@@ -0,0 +1 @@
+export { default as SettingsView } from "../../../src/ui/Settings.js";
diff --git a/packages/plugins/autorize/package.json b/packages/plugins/autorize/package.json
index 0a0c4ee..e420a73 100644
--- a/packages/plugins/autorize/package.json
+++ b/packages/plugins/autorize/package.json
@@ -12,6 +12,21 @@
       "types": "./dist/index.d.mts",
       "import": "./dist/index.mjs",
       "default": "./dist/index.mjs"
+    },
+    "./ui": {
+      "types": "./dist/ui/index.d.mts",
+      "import": "./dist/ui/index.mjs",
+      "default": "./dist/ui/index.mjs"
+    },
+    "./backend": {
+      "types": "./dist/backend/index.d.mts",
+      "import": "./dist/backend/index.mjs",
+      "default": "./dist/backend/index.mjs"
+    },
+    "./frontend": {
+      "types": "./dist/frontend/index.d.mts",
+      "import": "./dist/frontend/index.mjs",
+      "default": "./dist/frontend/index.mjs"
     }
   },
   "files": [
@@ -24,9 +39,13 @@
   },
   "dependencies": {
     "@threatmap/sdk-shared": "workspace:*",
-    "zod": "4.1.12"
+    "zod": "4.1.12",
+    "@threatmap/sdk-frontend": "workspace:*",
+    "primevue": "4.1.0",
+    "vue": "3.4.33",
+    "@threatmap/sdk-backend": "workspace:*"
   },
   "devDependencies": {
     "tsdown": "0.21.7"
   }
-}
\ No newline at end of file
+}
diff --git a/packages/plugins/autorize/src/ui/Settings.ts b/packages/plugins/autorize/src/ui/Settings.ts
new file mode 100644
index 0000000..a90e430
--- /dev/null
+++ b/packages/plugins/autorize/src/ui/Settings.ts
@@ -0,0 +1,142 @@
+import type { API as FrontendAPI } from "@threatmap/sdk-frontend";
+import Button from "primevue/button";
+import Textarea from "primevue/textarea";
+import {
+  defineComponent,
+  h,
+  onBeforeUnmount,
+  onMounted,
+  type PropType,
+  ref,
+} from "vue";
+
+import type { Spec, Template } from "../index.js";
+
+export type AutorizeSdk = FrontendAPI<Spec, Spec["events"]>;
+
+export default defineComponent({
+  name: "AutorizeSettingsView",
+  props: {
+    sdk: { type: Object as PropType<AutorizeSdk>, required: true },
+  },
+  setup(props) {
+    const templates = ref<Template[]>([]);
+    const config = ref("");
+    const queueActive = ref(false);
+    const error = ref<string | undefined>();
+    const handles: { stop: () => void }[] = [];
+
+    const refresh = async (): Promise<void> => {
+      error.value = undefined;
+      try {
+        const templateResult = await props.sdk.backend.getTemplates();
+        if (templateResult.kind === "Ok")
+          templates.value = templateResult.value;
+        else error.value = templateResult.error;
+
+        const configResult = await props.sdk.backend.getConfig();
+        if (configResult.kind === "Ok") {
+          config.value = JSON.stringify(configResult.value, null, 2);
+        } else {
+          error.value = configResult.error;
+        }
+      } catch (cause) {
+        error.value = cause instanceof Error ? cause.message : String(cause);
+      }
+    };
+
+    const saveConfig = async (): Promise<void> => {
+      try {
+        const parsed = JSON.parse(config.value) as Parameters<
+          AutorizeSdk["backend"]["updateConfig"]
+        >[0];
+        const result = await props.sdk.backend.updateConfig(parsed);
+        if (result.kind !== "Ok") error.value = result.error;
+      } catch {
+        error.value = "Config is not valid JSON";
+      }
+    };
+
+    const run = async (
+      action: () => Promise<{ kind: string; error?: string }>,
+    ): Promise<void> => {
+      const result = await action();
+      if (result.kind !== "Ok") error.value = result.error;
+      await refresh();
+    };
+
+    onMounted(() => {
+      void refresh();
+      handles.push(
+        props.sdk.backend.onEvent("template:created", () => void refresh()),
+        props.sdk.backend.onEvent("template:updated", () => void refresh()),
+        props.sdk.backend.onEvent("template:completed", () => void refresh()),
+        props.sdk.backend.onEvent("template:deleted", () => void refresh()),
+        props.sdk.backend.onEvent("templates:cleared", () => void refresh()),
+        props.sdk.backend.onEvent("queue:status-changed", (hasActiveJobs) => {
+          queueActive.value = hasActiveJobs;
+        }),
+      );
+    });
+
+    onBeforeUnmount(() => {
+      for (const handle of handles) handle.stop();
+    });
+
+    return () =>
+      h("div", { class: "flex max-w-2xl flex-col gap-4 p-4" }, [
+        h("h2", { class: "text-lg font-semibold" }, "Autorize"),
+        error.value !== undefined
+          ? h("p", { class: "text-sm text-red-500" }, error.value)
+          : null,
+        h(
+          "p",
+          { class: "text-sm" },
+          `Queue: ${queueActive.value ? "running" : "idle"}`,
+        ),
+        h("div", { class: "flex flex-wrap gap-2" }, [
+          h(Button, {
+            label: "Clear queue",
+            severity: "secondary",
+            onClick: () => void run(() => props.sdk.backend.clearQueue()),
+          }),
+          h(Button, {
+            label: "Rescan all",
+            onClick: () =>
+              void run(() => props.sdk.backend.rescanAllTemplates()),
+          }),
+          h(Button, {
+            label: "Clear all templates",
+            severity: "danger",
+            onClick: () =>
+              void run(() => props.sdk.backend.clearAllTemplates()),
+          }),
+        ]),
+        h(
+          "h3",
+          { class: "font-medium" },
+          `Templates (${templates.value.length})`,
+        ),
+        h(
+          "ul",
+          { class: "flex flex-col gap-1" },
+          templates.value.map((template) =>
+            h(
+              "li",
+              {},
+              `#${template.id} ${template.request.method} ${template.request.url}`,
+            ),
+          ),
+        ),
+        h("h3", { class: "font-medium" }, "Config (JSON)"),
+        h(Textarea, {
+          modelValue: config.value,
+          rows: 8,
+          "onUpdate:modelValue": (value: string) => {
+            config.value = value;
+          },
+        }),
+        h(Button, { label: "Save config", onClick: () => void saveConfig() }),
+      ]);
+  },
+});
diff --git a/packages/plugins/autorize/src/ui/index.ts b/packages/plugins/autorize/src/ui/index.ts
new file mode 100644
index 0000000..4140e47
--- /dev/null
+++ b/packages/plugins/autorize/src/ui/index.ts
@@ -0,0 +1,15 @@
+import type { SettingsPluginSlotContent } from "@threatmap/sdk-frontend";
+
+import SettingsView from "./Settings.js";
+
+export { default as SettingsView } from "./Settings.js";
+export type { AutorizeSdk } from "./Settings.js";
+
+export const createSettingsSlotContent = (): SettingsPluginSlotContent => ({
+  type: "Custom",
+  name: "Autorize",
+  definition: {
+    component:
+      SettingsView as unknown as SettingsPluginSlotContent["definition"]["component"],
+  },
+});
diff --git a/packages/plugins/autorize/tsconfig.json b/packages/plugins/autorize/tsconfig.json
index 3977b85..d29d85d 100644
--- a/packages/plugins/autorize/tsconfig.json
+++ b/packages/plugins/autorize/tsconfig.json
@@ -1,7 +1,14 @@
 {
   "extends": "../../../tsconfig.json",
   "compilerOptions": {
-    "isolatedDeclarations": false
+    "isolatedDeclarations": false,
+    "types": [
+      "@threatmap/sdk-backend"
+    ]
   },
-  "include": ["./src/**/*.ts"]
+  "include": [
+    "./src/**/*.ts",
+    "./backend/src/**/*.ts",
+    "./frontend/src/**/*.ts"
+  ]
 }
diff --git a/packages/plugins/autorize/tsdown.config.ts b/packages/plugins/autorize/tsdown.config.ts
index 8650aef..e130db2 100644
--- a/packages/plugins/autorize/tsdown.config.ts
+++ b/packages/plugins/autorize/tsdown.config.ts
@@ -1,13 +1,25 @@
 import { defineConfig } from "tsdown";
 
 export default defineConfig({
-  entry: ["./src/index.ts"],
+  entry: {
+    index: "./src/index.ts",
+    "ui/index": "./src/ui/index.ts",
+    "backend/index": "./backend/src/index.ts",
+    "frontend/index": "./frontend/src/index.ts",
+  },
   platform: "node",
   format: "esm",
   dts: true,
   sourcemap: true,
   clean: true,
   deps: {
-    neverBundle: ["zod", "@threatmap/sdk-shared"],
+    neverBundle: [
+      "zod",
+      "@threatmap/sdk-shared",
+      "@threatmap/sdk-frontend",
+      "@threatmap/sdk-backend",
+      "vue",
+      "primevue",
+    ],
   },
 });
diff --git a/packages/plugins/chatio/backend/src/api/index.ts b/packages/plugins/chatio/backend/src/api/index.ts
new file mode 100644
index 0000000..fae208c
--- /dev/null
+++ b/packages/plugins/chatio/backend/src/api/index.ts
@@ -0,0 +1,89 @@
+import type {
+  ChatSession,
+  CreateSession,
+  SendMessage,
+} from "../../../src/message.js";
+import type {
+  ModelItem,
+  ModelUserConfig,
+  Provider,
+} from "../../../src/model.js";
+import type { Result } from "../../../src/result.js";
+import type { ChatSettings } from "../../../src/settings.js";
+import type { ChatIoStore } from "../stores/chatStore.js";
+import type { BackendSDK } from "../types.js";
+
+const ok = <T>(value: T): Result<T> => ({ kind: "Ok", value });
+const err = <T>(error: string): Result<T> => ({ kind: "Error", error });
+
+export const apiGetSessions =
+  (store: ChatIoStore) => (): Result<ChatSession[]> =>
+    ok(store.listSessions());
+
+export const apiGetSession =
+  (store: ChatIoStore) =>
+  (_sdk: BackendSDK, sessionId: string): Result<ChatSession> => {
+    const session = store.getSession(sessionId);
+    return session === undefined
+      ? err(`Session ${sessionId} not found`)
+      : ok(session);
+  };
+
+export const apiCreateSession =
+  (store: ChatIoStore) =>
+  async (
+    sdk: BackendSDK,
+    input: CreateSession,
+  ): Promise<Result<ChatSession>> => {
+    const session = store.createSession(input.title, input.model);
+    sdk.api.send("session:created", session);
+    return ok(session);
+  };
+
+export const apiDeleteSession =
+  (store: ChatIoStore) =>
+  async (sdk: BackendSDK, sessionId: string): Promise<Result<void>> => {
+    if (!store.deleteSession(sessionId)) {
+      return err(`Session ${sessionId} not found`);
+    }
+    sdk.api.send("session:deleted", sessionId);
+    return ok(undefined);
+  };
+
+export const apiSendMessage =
+  (store: ChatIoStore) =>
+  async (sdk: BackendSDK, input: SendMessage): Promise<Result<ChatSession>> => {
+    const session = store.appendMessage(input.sessionId, "user", input.text);
+    if (session === undefined) {
+      return err(`Session ${input.sessionId} not found`);
+    }
+    sdk.api.send("session:updated", session);
+    sdk.api.send("message:streamed", input.sessionId, input.text);
+    return ok(session);
+  };
+
+export const apiGetModels = (store: ChatIoStore) => (): Result<ModelItem[]> =>
+  ok(store.listModels());
+
+export const apiSetModelConfig =
+  (store: ChatIoStore) =>
+  (_sdk: BackendSDK, config: ModelUserConfig): Result<void> => {
+    const model = store.setModelEnabled(config);
+    return model === undefined
+      ? err(`Model ${config.id} not found`)
+      : ok(undefined);
+  };
+
+export const apiGetSettings =
+  (store: ChatIoStore) => (): Result<ChatSettings> =>
+    ok(store.getSettings());
+
+export const apiUpdateSettings =
+  (store: ChatIoStore) =>
+  (_sdk: BackendSDK, updates: Partial<ChatSettings>): Result<ChatSettings> =>
+    ok(store.updateSettings(updates));
+
+export const apiGetProviderStatuses =
+  (store: ChatIoStore) =>
+  (): Result<{ id: Provider; isConfigured: boolean }[]> =>
+    ok(store.getProviderStatuses());
diff --git a/packages/plugins/chatio/backend/src/index.ts b/packages/plugins/chatio/backend/src/index.ts
new file mode 100644
index 0000000..da8a52d
--- /dev/null
+++ b/packages/plugins/chatio/backend/src/index.ts
@@ -0,0 +1,32 @@
+import {
+  apiCreateSession,
+  apiDeleteSession,
+  apiGetModels,
+  apiGetProviderStatuses,
+  apiGetSession,
+  apiGetSessions,
+  apiGetSettings,
+  apiSendMessage,
+  apiSetModelConfig,
+  apiUpdateSettings,
+} from "./api/index.js";
+import { setSDK } from "./sdk.js";
+import { createChatIoStore } from "./stores/chatStore.js";
+import type { BackendSDK } from "./types.js";
+
+export async function init(sdk: BackendSDK): Promise<void> {
+  setSDK(sdk);
+
+  const store = createChatIoStore();
+
+  sdk.api.register("getSessions", apiGetSessions(store));
+  sdk.api.register("getSession", apiGetSession(store));
+  sdk.api.register("createSession", apiCreateSession(store));
+  sdk.api.register("deleteSession", apiDeleteSession(store));
+  sdk.api.register("sendMessage", apiSendMessage(store));
+  sdk.api.register("getModels", apiGetModels(store));
+  sdk.api.register("setModelConfig", apiSetModelConfig(store));
+  sdk.api.register("getSettings", apiGetSettings(store));
+  sdk.api.register("updateSettings", apiUpdateSettings(store));
+  sdk.api.register("getProviderStatuses", apiGetProviderStatuses(store));
+}
diff --git a/packages/plugins/chatio/backend/src/sdk.ts b/packages/plugins/chatio/backend/src/sdk.ts
new file mode 100644
index 0000000..2ba415d
--- /dev/null
+++ b/packages/plugins/chatio/backend/src/sdk.ts
@@ -0,0 +1,7 @@
+import type { BackendSDK } from "./types.js";
+
+let sdk: BackendSDK | undefined;
+
+export const setSDK = (value: BackendSDK): void => {
+  sdk = value;
+};
diff --git a/packages/plugins/chatio/backend/src/stores/chatStore.ts b/packages/plugins/chatio/backend/src/stores/chatStore.ts
new file mode 100644
index 0000000..0ea6010
--- /dev/null
+++ b/packages/plugins/chatio/backend/src/stores/chatStore.ts
@@ -0,0 +1,108 @@
+import type { ChatMessage, ChatSession } from "../../../src/message.js";
+import {
+  DEFAULT_MODELS,
+  type ModelItem,
+  type ModelUserConfig,
+  type Provider,
+} from "../../../src/model.js";
+import {
+  type ChatSettings,
+  DEFAULT_CHAT_SETTINGS,
+} from "../../../src/settings.js";
+
+export type ChatIoStore = {
+  listSessions(): ChatSession[];
+  getSession(sessionId: string): ChatSession | undefined;
+  createSession(title: string, model?: string): ChatSession;
+  deleteSession(sessionId: string): boolean;
+  appendMessage(
+    sessionId: string,
+    role: ChatMessage["role"],
+    text: string,
+  ): ChatSession | undefined;
+  listModels(): ModelItem[];
+  setModelEnabled(config: ModelUserConfig): ModelItem | undefined;
+  getSettings(): ChatSettings;
+  updateSettings(updates: Partial<ChatSettings>): ChatSettings;
+  getProviderStatuses(): { id: Provider; isConfigured: boolean }[];
+};
+
+const clone = <T>(value: T): T => JSON.parse(JSON.stringify(value)) as T;
+
+let counter = 0;
+const nextId = (): string => `session-${Date.now()}-${++counter}`;
+
+export const createChatIoStore = (): ChatIoStore => {
+  let sessions: ChatSession[] = [];
+  const models: ModelItem[] = clone(DEFAULT_MODELS);
+  let settings: ChatSettings = clone(DEFAULT_CHAT_SETTINGS);
+  const enabledProviders = new Set<string>();
+
+  return {
+    listSessions: () => clone(sessions),
+    getSession: (sessionId) => {
+      const session = sessions.find((candidate) => candidate.id === sessionId);
+      return session === undefined ? undefined : clone(session);
+    },
+    createSession: (title, model) => {
+      const now = new Date().toISOString();
+      const session: ChatSession = {
+        id: nextId(),
+        title,
+        model,
+        messages: [],
+        createdAt: now,
+        updatedAt: now,
+      };
+      sessions = [...sessions, session];
+      return clone(session);
+    },
+    deleteSession: (sessionId) => {
+      const before = sessions.length;
+      sessions = sessions.filter((session) => session.id !== sessionId);
+      return sessions.length < before;
+    },
+    appendMessage: (sessionId, role, text) => {
+      const session = sessions.find((candidate) => candidate.id === sessionId);
+      if (session === undefined) {
+        return undefined;
+      }
+      session.messages.push({
+        id: `message-${Date.now()}-${++counter}`,
+        role,
+        parts: [{ type: "text", text }],
+        createdAt: new Date().toISOString(),
+      });
+      session.updatedAt = new Date().toISOString();
+      return clone(session);
+    },
+    listModels: () => clone(models),
+    setModelEnabled: (config) => {
+      const model = models.find((candidate) => candidate.id === config.id);
+      if (model === undefined) {
+        return undefined;
+      }
+      if (config.enabled) {
+        enabledProviders.add(model.provider);
+      } else {
+        enabledProviders.delete(model.provider);
+      }
+      return clone(model);
+    },
+    getSettings: () => clone(settings),
+    updateSettings: (updates) => {
+      settings = { ...settings, ...updates };
+      return clone(settings);
+    },
+    getProviderStatuses: () => {
+      const providers = new Map<string, Provider>();
+      for (const model of models) {
+        providers.set(model.provider, model.provider);
+      }
+      return [...providers.values()].map((provider) => ({
+        id: provider,
+        isConfigured: enabledProviders.has(provider),
+      }));
+    },
+  };
+};
diff --git a/packages/plugins/chatio/backend/src/types.ts b/packages/plugins/chatio/backend/src/types.ts
new file mode 100644
index 0000000..0bf2714
--- /dev/null
+++ b/packages/plugins/chatio/backend/src/types.ts
@@ -0,0 +1,5 @@
+import type { SDK } from "threatmap:plugin";
+
+import type { Spec } from "../../src/index.js";
+
+export type BackendSDK = SDK<Spec>;
diff --git a/packages/plugins/chatio/frontend/src/index.ts b/packages/plugins/chatio/frontend/src/index.ts
new file mode 100644
index 0000000..3a02275
--- /dev/null
+++ b/packages/plugins/chatio/frontend/src/index.ts
@@ -0,0 +1,18 @@
+import { SettingsSlot } from "@threatmap/sdk-frontend";
+
+import { createSettingsSlotContent } from "../../src/ui/index.js";
+
+import type { FrontendSDK } from "./types.js";
+
+export type { FrontendSDK } from "./types.js";
+export { SettingsView } from "./views/SettingsView.js";
+
+export const init = (sdk: FrontendSDK): void => {
+  sdk.settings.addToSlot(
+    SettingsSlot.PluginsSection,
+    createSettingsSlotContent(),
+  );
+  sdk.sidebar.registerItem("Chat.io", "/chatio", {
+    icon: "fas fa-comments",
+  });
+};
diff --git a/packages/plugins/chatio/frontend/src/types.ts b/packages/plugins/chatio/frontend/src/types.ts
new file mode 100644
index 0000000..99b052c
--- /dev/null
+++ b/packages/plugins/chatio/frontend/src/types.ts
@@ -0,0 +1,5 @@
+import type { API as FrontendAPI } from "@threatmap/sdk-frontend";
+
+import type { Spec } from "../../src/index.js";
+
+export type FrontendSDK = FrontendAPI<Spec, Spec["events"]>;
diff --git a/packages/plugins/chatio/frontend/src/views/SettingsView.ts b/packages/plugins/chatio/frontend/src/views/SettingsView.ts
new file mode 100644
index 0000000..0b532f6
--- /dev/null
+++ b/packages/plugins/chatio/frontend/src/views/SettingsView.ts
@@ -0,0 +1 @@
+export { default as SettingsView } from "../../../src/ui/Settings.js";
diff --git a/packages/plugins/chatio/package.json b/packages/plugins/chatio/package.json
index 051d4f4..7ddeb5a 100644
--- a/packages/plugins/chatio/package.json
+++ b/packages/plugins/chatio/package.json
@@ -13,6 +13,21 @@
       "types": "./dist/index.d.mts",
       "import": "./dist/index.mjs",
       "default": "./dist/index.mjs"
+    },
+    "./ui": {
+      "types": "./dist/ui/index.d.mts",
+      "import": "./dist/ui/index.mjs",
+      "default": "./dist/ui/index.mjs"
+    },
+    "./backend": {
+      "types": "./dist/backend/index.d.mts",
+      "import": "./dist/backend/index.mjs",
+      "default": "./dist/backend/index.mjs"
+    },
+    "./frontend": {
+      "types": "./dist/frontend/index.d.mts",
+      "import": "./dist/frontend/index.mjs",
+      "default": "./dist/frontend/index.mjs"
     }
   },
   "files": [
@@ -25,7 +40,11 @@
   },
   "dependencies": {
     "@threatmap/sdk-shared": "workspace:*",
-    "zod": "4.3.6"
+    "zod": "4.3.6",
+    "@threatmap/sdk-frontend": "workspace:*",
+    "primevue": "4.1.0",
+    "vue": "3.4.33",
+    "@threatmap/sdk-backend": "workspace:*"
   },
   "devDependencies": {
     "tsdown": "0.20.1"
diff --git a/packages/plugins/chatio/src/ui/Settings.ts b/packages/plugins/chatio/src/ui/Settings.ts
new file mode 100644
index 0000000..4063585
--- /dev/null
+++ b/packages/plugins/chatio/src/ui/Settings.ts
@@ -0,0 +1,207 @@
+import type { API as FrontendAPI } from "@threatmap/sdk-frontend";
+import Button from "primevue/button";
+import InputText from "primevue/inputtext";
+import Tag from "primevue/tag";
+import Textarea from "primevue/textarea";
+import {
+  defineComponent,
+  h,
+  onBeforeUnmount,
+  onMounted,
+  type PropType,
+  ref,
+} from "vue";
+
+import type { Spec } from "../index.js";
+import type { ChatSession } from "../message.js";
+
+export type ChatIoSdk = FrontendAPI<Spec, Spec["events"]>;
+
+export default defineComponent({
+  name: "ChatioSettingsView",
+  props: {
+    sdk: { type: Object as PropType<ChatIoSdk>, required: true },
+  },
+  setup(props) {
+    const sessions = ref<ChatSession[]>([]);
+    const selectedId = ref<string | undefined>();
+    const newTitle = ref("");
+    const message = ref("");
+    const providers = ref<{ id: string; isConfigured: boolean }[]>([]);
+    const models = ref<{ id?: string; name?: string }[]>([]);
+    const error = ref<string | undefined>();
+    const output = ref("");
+
+    const handles: { stop: () => void }[] = [];
+
+    const refresh = async (): Promise<void> => {
+      error.value = undefined;
+      try {
+        const result = await props.sdk.backend.getSessions();
+        if (result.kind === "Ok") sessions.value = result.value;
+        else error.value = result.error;
+
+        const providerResult = await props.sdk.backend.getProviderStatuses();
+        if (providerResult.kind === "Ok")
+          providers.value = providerResult.value;
+
+        const modelResult = await props.sdk.backend.getModels();
+        if (modelResult.kind === "Ok") models.value = modelResult.value;
+      } catch (cause) {
+        error.value = cause instanceof Error ? cause.message : String(cause);
+      }
+    };
+
+    const createSession = async (): Promise<void> => {
+      const title = newTitle.value.trim() || "New session";
+      const result = await props.sdk.backend.createSession({
+        title,
+        messages: [],
+      });
+      if (result.kind === "Ok") {
+        newTitle.value = "";
+        selectedId.value = result.value.id;
+        await refresh();
+      } else {
+        error.value = result.error;
+      }
+    };
+
+    const deleteSession = async (sessionId: string): Promise<void> => {
+      const result = await props.sdk.backend.deleteSession(sessionId);
+      if (result.kind !== "Ok") error.value = result.error;
+      if (selectedId.value === sessionId) selectedId.value = undefined;
+      await refresh();
+    };
+
+    const send = async (): Promise<void> => {
+      const sessionId = selectedId.value;
+      const text = message.value.trim();
+      if (
+        sessionId === undefined ||
+        sessionId.length === 0 ||
+        text.length === 0
+      )
+        return;
+      const result = await props.sdk.backend.sendMessage({ sessionId, text });
+      if (result.kind === "Ok") {
+        message.value = "";
+        await refresh();
+      } else {
+        error.value = result.error;
+      }
+    };
+
+    onMounted(() => {
+      void refresh();
+      handles.push(
+        props.sdk.backend.onEvent("session:created", () => void refresh()),
+        props.sdk.backend.onEvent("session:updated", () => void refresh()),
+        props.sdk.backend.onEvent("session:deleted", () => void refresh()),
+      );
+    });
+
+    onBeforeUnmount(() => {
+      for (const handle of handles) handle.stop();
+    });
+
+    const selected = () =>
+      sessions.value.find((session) => session.id === selectedId.value);
+
+    return () =>
+      h("div", { class: "flex max-w-2xl flex-col gap-4 p-4" }, [
+        h("h2", { class: "text-lg font-semibold" }, "Chat.io"),
+        error.value !== undefined
+          ? h("p", { class: "text-sm text-red-500" }, error.value)
+          : null,
+        h("h3", { class: "font-medium" }, "Sessions"),
+        h("div", { class: "flex gap-2" }, [
+          h(InputText, {
+            modelValue: newTitle.value,
+            placeholder: "Session title",
+            "onUpdate:modelValue": (value: string) => {
+              newTitle.value = value;
+            },
+          }),
+          h(Button, { label: "Create", onClick: () => void createSession() }),
+        ]),
+        h(
+          "ul",
+          { class: "flex flex-col gap-1" },
+          sessions.value.map((session) =>
+            h("li", { class: "flex items-center gap-2" }, [
+              h(Button, {
+                label: `${session.title} (${session.messages.length} msg)`,
+                text: true,
+                onClick: () => {
+                  selectedId.value = session.id;
+                },
+              }),
+              h(Button, {
+                label: "Delete",
+                severity: "danger",
+                text: true,
+                onClick: () => void deleteSession(session.id),
+              }),
+            ]),
+          ),
+        ),
+        selected()
+          ? h("div", { class: "flex flex-col gap-2" }, [
+              h(
+                "h3",
+                { class: "font-medium" },
+                `Session: ${selected()?.title}`,
+              ),
+              h(
+                "ul",
+                {},
+                selected()?.messages.map((msg) =>
+                  h(
+                    "li",
+                    {},
+                    `${msg.role}: ${msg.parts
+                      .map((part) =>
+                        part.type === "text" ? part.text : "[image]",
+                      )
+                      .join(" ")}`,
+                  ),
+                ) ?? [],
+              ),
+              h("div", { class: "flex gap-2" }, [
+                h(InputText, {
+                  modelValue: message.value,
+                  placeholder: "Message",
+                  "onUpdate:modelValue": (value: string) => {
+                    message.value = value;
+                  },
+                }),
+                h(Button, { label: "Send", onClick: () => void send() }),
+              ]),
+            ])
+          : null,
+        h("h3", { class: "font-medium" }, "Providers"),
+        h(
+          "ul",
+          {},
+          providers.value.map((provider) =>
+            h("li", { class: "flex items-center gap-2" }, [
+              h("span", provider.id),
+              h(Tag, {
+                value: provider.isConfigured ? "configured" : "missing",
+                severity: provider.isConfigured ? "success" : "warn",
+              }),
+            ]),
+          ),
+        ),
+        h("h3", { class: "font-medium" }, "Models"),
+        h(
+          "ul",
+          {},
+          models.value.map((model, index) =>
+            h("li", { key: index }, model.name ?? model.id ?? "unknown"),
+          ),
+        ),
+      ]);
+  },
+});
diff --git a/packages/plugins/chatio/src/ui/index.ts b/packages/plugins/chatio/src/ui/index.ts
new file mode 100644
index 0000000..b94c2e0
--- /dev/null
+++ b/packages/plugins/chatio/src/ui/index.ts
@@ -0,0 +1,15 @@
+import type { SettingsPluginSlotContent } from "@threatmap/sdk-frontend";
+
+import SettingsView from "./Settings.js";
+
+export { default as SettingsView } from "./Settings.js";
+export type { ChatIoSdk } from "./Settings.js";
+
+export const createSettingsSlotContent = (): SettingsPluginSlotContent => ({
+  type: "Custom",
+  name: "Chat.io",
+  definition: {
+    component:
+      SettingsView as unknown as SettingsPluginSlotContent["definition"]["component"],
+  },
+});
diff --git a/packages/plugins/chatio/tsconfig.json b/packages/plugins/chatio/tsconfig.json
index 3977b85..d29d85d 100644
--- a/packages/plugins/chatio/tsconfig.json
+++ b/packages/plugins/chatio/tsconfig.json
@@ -1,7 +1,14 @@
 {
   "extends": "../../../tsconfig.json",
   "compilerOptions": {
-    "isolatedDeclarations": false
+    "isolatedDeclarations": false,
+    "types": [
+      "@threatmap/sdk-backend"
+    ]
   },
-  "include": ["./src/**/*.ts"]
+  "include": [
+    "./src/**/*.ts",
+    "./backend/src/**/*.ts",
+    "./frontend/src/**/*.ts"
+  ]
 }
diff --git a/packages/plugins/chatio/tsdown.config.ts b/packages/plugins/chatio/tsdown.config.ts
index 8650aef..e130db2 100644
--- a/packages/plugins/chatio/tsdown.config.ts
+++ b/packages/plugins/chatio/tsdown.config.ts
@@ -1,13 +1,25 @@
 import { defineConfig } from "tsdown";
 
 export default defineConfig({
-  entry: ["./src/index.ts"],
+  entry: {
+    index: "./src/index.ts",
+    "ui/index": "./src/ui/index.ts",
+    "backend/index": "./backend/src/index.ts",
+    "frontend/index": "./frontend/src/index.ts",
+  },
   platform: "node",
   format: "esm",
   dts: true,
   sourcemap: true,
   clean: true,
   deps: {
-    neverBundle: ["zod", "@threatmap/sdk-shared"],
+    neverBundle: [
+      "zod",
+      "@threatmap/sdk-shared",
+      "@threatmap/sdk-frontend",
+      "@threatmap/sdk-backend",
+      "vue",
+      "primevue",
+    ],
   },
 });
diff --git a/packages/plugins/compare/backend/src/api/index.ts b/packages/plugins/compare/backend/src/api/index.ts
new file mode 100644
index 0000000..1f380da
--- /dev/null
+++ b/packages/plugins/compare/backend/src/api/index.ts
@@ -0,0 +1,88 @@
+import type {
+  AddFileItemInput,
+  AddItemInput,
+  AddRequestsInput,
+  CompareItem,
+  ItemSelection,
+  Panel,
+} from "../../../src/item.js";
+import type { Result } from "../../../src/result.js";
+import type { CompareStore } from "../stores/compareStore.js";
+import type { BackendSDK } from "../types.js";
+
+const ok = <T>(value: T): Result<T> => ({ kind: "Ok", value });
+const err = <T>(error: string): Result<T> => ({ kind: "Error", error });
+
+export const apiListItems =
+  (store: CompareStore) =>
+  async (_sdk: BackendSDK, panel: Panel): Promise<Result<CompareItem[]>> =>
+    ok(store.listItems(panel));
+
+export const apiAddItem =
+  (store: CompareStore) =>
+  async (
+    sdk: BackendSDK,
+    input: AddItemInput,
+  ): Promise<Result<CompareItem>> => {
+    if (input.data.length === 0) {
+      return err("The item is empty.");
+    }
+    const item = store.addItem(input);
+    sdk.api.send("itemsChanged");
+    return ok(item);
+  };
+
+export const apiAddFileItem =
+  (store: CompareStore) =>
+  async (
+    sdk: BackendSDK,
+    input: AddFileItemInput,
+  ): Promise<Result<CompareItem>> => {
+    if (input.path.length === 0) {
+      return err("The uploaded file has no path.");
+    }
+    const item = store.addFileItem(input);
+    sdk.api.send("itemsChanged");
+    return ok(item);
+  };
+
+export const apiAddRequests =
+  (store: CompareStore) =>
+  async (
+    sdk: BackendSDK,
+    input: AddRequestsInput,
+  ): Promise<Result<CompareItem[]>> => {
+    const items = store.addRequests(input);
+    sdk.api.send("itemsChanged");
+    return ok(items);
+  };
+
+export const apiRemoveItems =
+  (store: CompareStore) =>
+  async (
+    sdk: BackendSDK,
+    selection: ItemSelection,
+  ): Promise<Result<number[]>> => {
+    const ids = store.removeItems(selection);
+    sdk.api.send("itemsChanged");
+    return ok(ids);
+  };
+
+export const apiMoveItems =
+  (store: CompareStore) =>
+  async (
+    sdk: BackendSDK,
+    selection: ItemSelection,
+  ): Promise<Result<CompareItem[]>> => {
+    const items = store.moveItems(selection);
+    sdk.api.send("itemsChanged");
+    return ok(items);
+  };
+
+export const apiClearPanel =
+  (store: CompareStore) =>
+  async (sdk: BackendSDK, panel: Panel): Promise<Result<Panel>> => {
+    store.clearPanel(panel);
+    sdk.api.send("itemsChanged");
+    return ok(panel);
+  };
diff --git a/packages/plugins/compare/backend/src/index.ts b/packages/plugins/compare/backend/src/index.ts
new file mode 100644
index 0000000..c5cef28
--- /dev/null
+++ b/packages/plugins/compare/backend/src/index.ts
@@ -0,0 +1,26 @@
+import {
+  apiAddFileItem,
+  apiAddItem,
+  apiAddRequests,
+  apiClearPanel,
+  apiListItems,
+  apiMoveItems,
+  apiRemoveItems,
+} from "./api/index.js";
+import { setSDK } from "./sdk.js";
+import { createCompareStore } from "./stores/compareStore.js";
+import type { BackendSDK } from "./types.js";
+
+export async function init(sdk: BackendSDK): Promise<void> {
+  setSDK(sdk);
+
+  const store = createCompareStore();
+
+  sdk.api.register("listItems", apiListItems(store));
+  sdk.api.register("addItem", apiAddItem(store));
+  sdk.api.register("addFileItem", apiAddFileItem(store));
+  sdk.api.register("addRequests", apiAddRequests(store));
+  sdk.api.register("removeItems", apiRemoveItems(store));
+  sdk.api.register("moveItems", apiMoveItems(store));
+  sdk.api.register("clearPanel", apiClearPanel(store));
+}
diff --git a/packages/plugins/compare/backend/src/sdk.ts b/packages/plugins/compare/backend/src/sdk.ts
new file mode 100644
index 0000000..2ba415d
--- /dev/null
+++ b/packages/plugins/compare/backend/src/sdk.ts
@@ -0,0 +1,7 @@
+import type { BackendSDK } from "./types.js";
+
+let sdk: BackendSDK | undefined;
+
+export const setSDK = (value: BackendSDK): void => {
+  sdk = value;
+};
diff --git a/packages/plugins/compare/backend/src/stores/compareStore.ts b/packages/plugins/compare/backend/src/stores/compareStore.ts
new file mode 100644
index 0000000..5d3f9a3
--- /dev/null
+++ b/packages/plugins/compare/backend/src/stores/compareStore.ts
@@ -0,0 +1,90 @@
+import {
+  type AddFileItemInput,
+  type AddItemInput,
+  type AddRequestsInput,
+  type CompareItem,
+  getOtherPanel,
+  type ItemSelection,
+  type Panel,
+} from "../../../src/item.js";
+
+export type CompareStore = {
+  listItems(panel: Panel): CompareItem[];
+  addItem(input: AddItemInput): CompareItem;
+  addFileItem(input: AddFileItemInput): CompareItem;
+  addRequests(input: AddRequestsInput): CompareItem[];
+  removeItems(selection: ItemSelection): number[];
+  moveItems(selection: ItemSelection): CompareItem[];
+  clearPanel(panel: Panel): CompareItem[];
+};
+
+const clone = <T>(value: T): T => JSON.parse(JSON.stringify(value)) as T;
+
+let nextId = 0;
+
+export const createCompareStore = (): CompareStore => {
+  let panels: Record<Panel, CompareItem[]> = { original: [], modified: [] };
+
+  const push = (input: Omit<AddItemInput, never>): CompareItem => {
+    const item: CompareItem = {
+      id: ++nextId,
+      kind: input.kind,
+      source: input.source,
+      data: input.data,
+      createdAt: new Date().toISOString(),
+    };
+    panels = { ...panels, [input.panel]: [...panels[input.panel], item] };
+    return clone(item);
+  };
+
+  return {
+    listItems: (panel) => clone(panels[panel]),
+    addItem: (input) => push(input),
+    addFileItem: (input) =>
+      push({
+        panel: input.panel,
+        kind: input.kind,
+        source: input.path,
+        data: `File: ${input.path}`,
+      }),
+    addRequests: (input) =>
+      input.requestIds.map((requestId) =>
+        push({
+          panel: input.panel,
+          kind: "request",
+          source: requestId,
+          data: `Request ${requestId}`,
+        }),
+      ),
+    removeItems: (selection) => {
+      const removed = panels[selection.panel].filter((item) =>
+        selection.ids.includes(item.id),
+      );
+      panels = {
+        ...panels,
+        [selection.panel]: panels[selection.panel].filter(
+          (item) => !selection.ids.includes(item.id),
+        ),
+      };
+      return removed.map((item) => item.id);
+    },
+    moveItems: (selection) => {
+      const other = getOtherPanel(selection.panel);
+      const moved = panels[selection.panel].filter((item) =>
+        selection.ids.includes(item.id),
+      );
+      panels = {
+        ...panels,
+        [selection.panel]: panels[selection.panel].filter(
+          (item) => !selection.ids.includes(item.id),
+        ),
+        [other]: [...panels[other], ...moved],
+      };
+      return clone(moved);
+    },
+    clearPanel: (panel) => {
+      panels = { ...panels, [panel]: [] };
+      return [];
+    },
+  };
+};
diff --git a/packages/plugins/compare/backend/src/types.ts b/packages/plugins/compare/backend/src/types.ts
new file mode 100644
index 0000000..0bf2714
--- /dev/null
+++ b/packages/plugins/compare/backend/src/types.ts
@@ -0,0 +1,5 @@
+import type { SDK } from "threatmap:plugin";
+
+import type { Spec } from "../../src/index.js";
+
+export type BackendSDK = SDK<Spec>;
diff --git a/packages/plugins/compare/frontend/src/index.ts b/packages/plugins/compare/frontend/src/index.ts
new file mode 100644
index 0000000..03fd9ef
--- /dev/null
+++ b/packages/plugins/compare/frontend/src/index.ts
@@ -0,0 +1,18 @@
+import { SettingsSlot } from "@threatmap/sdk-frontend";
+
+import { createSettingsSlotContent } from "../../src/ui/index.js";
+
+import type { FrontendSDK } from "./types.js";
+
+export type { FrontendSDK } from "./types.js";
+export { SettingsView } from "./views/SettingsView.js";
+
+export const init = (sdk: FrontendSDK): void => {
+  sdk.settings.addToSlot(
+    SettingsSlot.PluginsSection,
+    createSettingsSlotContent(),
+  );
+  sdk.sidebar.registerItem("Compare", "/compare", {
+    icon: "fas fa-code-compare",
+  });
+};
diff --git a/packages/plugins/compare/frontend/src/types.ts b/packages/plugins/compare/frontend/src/types.ts
new file mode 100644
index 0000000..99b052c
--- /dev/null
+++ b/packages/plugins/compare/frontend/src/types.ts
@@ -0,0 +1,5 @@
+import type { API as FrontendAPI } from "@threatmap/sdk-frontend";
+
+import type { Spec } from "../../src/index.js";
+
+export type FrontendSDK = FrontendAPI<Spec, Spec["events"]>;
diff --git a/packages/plugins/compare/frontend/src/views/SettingsView.ts b/packages/plugins/compare/frontend/src/views/SettingsView.ts
new file mode 100644
index 0000000..0b532f6
--- /dev/null
+++ b/packages/plugins/compare/frontend/src/views/SettingsView.ts
@@ -0,0 +1 @@
+export { default as SettingsView } from "../../../src/ui/Settings.js";
diff --git a/packages/plugins/compare/package.json b/packages/plugins/compare/package.json
index ef5872b..3896328 100644
--- a/packages/plugins/compare/package.json
+++ b/packages/plugins/compare/package.json
@@ -13,6 +13,21 @@
       "types": "./dist/index.d.mts",
       "import": "./dist/index.mjs",
       "default": "./dist/index.mjs"
+    },
+    "./ui": {
+      "types": "./dist/ui/index.d.mts",
+      "import": "./dist/ui/index.mjs",
+      "default": "./dist/ui/index.mjs"
+    },
+    "./backend": {
+      "types": "./dist/backend/index.d.mts",
+      "import": "./dist/backend/index.mjs",
+      "default": "./dist/backend/index.mjs"
+    },
+    "./frontend": {
+      "types": "./dist/frontend/index.d.mts",
+      "import": "./dist/frontend/index.mjs",
+      "default": "./dist/frontend/index.mjs"
     }
   },
   "files": [
@@ -25,7 +40,11 @@
   },
   "dependencies": {
     "@threatmap/sdk-shared": "workspace:*",
-    "zod": "4.3.6"
+    "zod": "4.3.6",
+    "@threatmap/sdk-frontend": "workspace:*",
+    "primevue": "4.1.0",
+    "vue": "3.4.33",
+    "@threatmap/sdk-backend": "workspace:*"
   },
   "devDependencies": {
     "tsdown": "0.20.1"
diff --git a/packages/plugins/compare/src/ui/Settings.ts b/packages/plugins/compare/src/ui/Settings.ts
new file mode 100644
index 0000000..8cb5118
--- /dev/null
+++ b/packages/plugins/compare/src/ui/Settings.ts
@@ -0,0 +1,183 @@
+import type { API as FrontendAPI } from "@threatmap/sdk-frontend";
+import Button from "primevue/button";
+import InputText from "primevue/inputtext";
+import Tag from "primevue/tag";
+import Textarea from "primevue/textarea";
+import {
+  defineComponent,
+  h,
+  onBeforeUnmount,
+  onMounted,
+  type PropType,
+  ref,
+} from "vue";
+
+import type { Spec } from "../index.js";
+import type { CompareItem, ItemKind, Panel } from "../item.js";
+
+export type CompareSdk = FrontendAPI<Spec, Spec["events"]>;
+
+const KINDS: ItemKind[] = ["request", "response", "file", "clipboard"];
+
+export default defineComponent({
+  name: "CompareSettingsView",
+  props: {
+    sdk: { type: Object as PropType<CompareSdk>, required: true },
+  },
+  setup(props) {
+    const panel = ref<Panel>("original");
+    const items = ref<CompareItem[]>([]);
+    const selected = ref<Set<number>>(new Set());
+    const source = ref("");
+    const data = ref("");
+    const kind = ref<ItemKind>("request");
+    const error = ref<string | undefined>();
+    const itemsChanged = ref<{ stop: () => void } | undefined>();
+
+    const refresh = async (): Promise<void> => {
+      error.value = undefined;
+      const result = await props.sdk.backend.listItems(panel.value);
+      if (result.kind === "Ok") items.value = result.value;
+      else error.value = result.error;
+    };
+
+    const switchPanel = async (next: Panel): Promise<void> => {
+      panel.value = next;
+      selected.value = new Set();
+      await refresh();
+    };
+
+    const add = async (): Promise<void> => {
+      const result = await props.sdk.backend.addItem({
+        panel: panel.value,
+        kind: kind.value,
+        source: source.value,
+        data: data.value,
+      });
+      if (result.kind === "Ok") {
+        source.value = "";
+        data.value = "";
+        await refresh();
+      } else {
+        error.value = result.error;
+      }
+    };
+
+    const removeSelected = async (): Promise<void> => {
+      const ids = [...selected.value];
+      if (ids.length === 0) return;
+      const result = await props.sdk.backend.removeItems({
+        panel: panel.value,
+        ids,
+      });
+      if (result.kind !== "Ok") error.value = result.error;
+      selected.value = new Set();
+      await refresh();
+    };
+
+    const clear = async (): Promise<void> => {
+      const result = await props.sdk.backend.clearPanel(panel.value);
+      if (result.kind !== "Ok") error.value = result.error;
+      await refresh();
+    };
+
+    onMounted(() => {
+      void refresh();
+      itemsChanged.value = props.sdk.backend.onEvent(
+        "itemsChanged",
+        () => void refresh(),
+      );
+    });
+
+    onBeforeUnmount(() => {
+      itemsChanged.value?.stop();
+    });
+
+    return () =>
+      h("div", { class: "flex max-w-2xl flex-col gap-4 p-4" }, [
+        h("h2", { class: "text-lg font-semibold" }, "Compare"),
+        error.value !== undefined
+          ? h("p", { class: "text-sm text-red-500" }, error.value)
+          : null,
+        h("div", { class: "flex gap-2" }, [
+          h(Button, {
+            label: "Original",
+            severity: panel.value === "original" ? undefined : "secondary",
+            onClick: () => void switchPanel("original"),
+          }),
+          h(Button, {
+            label: "Modified",
+            severity: panel.value === "modified" ? undefined : "secondary",
+            onClick: () => void switchPanel("modified"),
+          }),
+          h(Button, {
+            label: "Clear panel",
+            severity: "danger",
+            text: true,
+            onClick: () => void clear(),
+          }),
+        ]),
+        h("ul", { class: "flex flex-col gap-1" }, [
+          ...items.value.map((item) =>
+            h("li", { class: "flex items-center gap-2" }, [
+              h("input", {
+                type: "checkbox",
+                checked: selected.value.has(item.id),
+                onChange: (event: Event) => {
+                  const next = new Set(selected.value);
+                  if ((event.target as HTMLInputElement).checked)
+                    next.add(item.id);
+                  else next.delete(item.id);
+                  selected.value = next;
+                },
+              }),
+              h(Tag, { value: item.kind }),
+              h("span", item.source),
+              h(
+                "span",
+                { class: "text-sm text-surface-500" },
+                `${item.data.length} bytes`,
+              ),
+            ]),
+          ),
+          selected.value.size > 0
+            ? h(Button, {
+                label: `Remove ${selected.value.size}`,
+                severity: "danger",
+                text: true,
+                onClick: () => void removeSelected(),
+              })
+            : null,
+        ]),
+        h("h3", { class: "font-medium" }, "Add item"),
+        h("div", { class: "flex flex-wrap gap-2" }, [
+          ...KINDS.map((k) =>
+            h(Button, {
+              label: k,
+              severity: kind.value === k ? undefined : "secondary",
+              text: true,
+              onClick: () => {
+                kind.value = k;
+              },
+            }),
+          ),
+        ]),
+        h(InputText, {
+          modelValue: source.value,
+          placeholder: "Source",
+          "onUpdate:modelValue": (value: string) => {
+            source.value = value;
+          },
+        }),
+        h(Textarea, {
+          modelValue: data.value,
+          placeholder: "Data",
+          rows: 4,
+          "onUpdate:modelValue": (value: string) => {
+            data.value = value;
+          },
+        }),
+        h(Button, { label: "Add", onClick: () => void add() }),
+      ]);
+  },
+});
diff --git a/packages/plugins/compare/src/ui/index.ts b/packages/plugins/compare/src/ui/index.ts
new file mode 100644
index 0000000..6cb2c9e
--- /dev/null
+++ b/packages/plugins/compare/src/ui/index.ts
@@ -0,0 +1,15 @@
+import type { SettingsPluginSlotContent } from "@threatmap/sdk-frontend";
+
+import SettingsView from "./Settings.js";
+
+export { default as SettingsView } from "./Settings.js";
+export type { CompareSdk } from "./Settings.js";
+
+export const createSettingsSlotContent = (): SettingsPluginSlotContent => ({
+  type: "Custom",
+  name: "Compare",
+  definition: {
+    component:
+      SettingsView as unknown as SettingsPluginSlotContent["definition"]["component"],
+  },
+});
diff --git a/packages/plugins/compare/tsconfig.json b/packages/plugins/compare/tsconfig.json
index 3977b85..d29d85d 100644
--- a/packages/plugins/compare/tsconfig.json
+++ b/packages/plugins/compare/tsconfig.json
@@ -1,7 +1,14 @@
 {
   "extends": "../../../tsconfig.json",
   "compilerOptions": {
-    "isolatedDeclarations": false
+    "isolatedDeclarations": false,
+    "types": [
+      "@threatmap/sdk-backend"
+    ]
   },
-  "include": ["./src/**/*.ts"]
+  "include": [
+    "./src/**/*.ts",
+    "./backend/src/**/*.ts",
+    "./frontend/src/**/*.ts"
+  ]
 }
diff --git a/packages/plugins/compare/tsdown.config.ts b/packages/plugins/compare/tsdown.config.ts
index 8650aef..e130db2 100644
--- a/packages/plugins/compare/tsdown.config.ts
+++ b/packages/plugins/compare/tsdown.config.ts
@@ -1,13 +1,25 @@
 import { defineConfig } from "tsdown";
 
 export default defineConfig({
-  entry: ["./src/index.ts"],
+  entry: {
+    index: "./src/index.ts",
+    "ui/index": "./src/ui/index.ts",
+    "backend/index": "./backend/src/index.ts",
+    "frontend/index": "./frontend/src/index.ts",
+  },
   platform: "node",
   format: "esm",
   dts: true,
   sourcemap: true,
   clean: true,
   deps: {
-    neverBundle: ["zod", "@threatmap/sdk-shared"],
+    neverBundle: [
+      "zod",
+      "@threatmap/sdk-shared",
+      "@threatmap/sdk-frontend",
+      "@threatmap/sdk-backend",
+      "vue",
+      "primevue",
+    ],
   },
 });
diff --git a/packages/plugins/paramfinder/backend/src/api/index.ts b/packages/plugins/paramfinder/backend/src/api/index.ts
new file mode 100644
index 0000000..32e5a2f
--- /dev/null
+++ b/packages/plugins/paramfinder/backend/src/api/index.ts
@@ -0,0 +1,74 @@
+import type { SessionDescriptor } from "../../../src/api.js";
+import type { EngineConfig } from "../../../src/config-schema.js";
+import type { Result } from "../../../src/result.js";
+import type {
+  BaselineProfile,
+  EngineRequest,
+  Finding,
+} from "../../../src/types.js";
+import type { ParamFinderStore } from "../stores/paramfinderStore.js";
+import type { BackendSDK } from "../types.js";
+
+const ok = <T>(value: T): Result<T> => ({ kind: "Ok", value });
+const err = <T>(error: string): Result<T> => ({ kind: "Error", error });
+
+const ENGINE_UNAVAILABLE =
+  "The paramfinder engine is not available in this environment.";
+
+export const apiStartMining =
+  (store: ParamFinderStore) =>
+  async (
+    sdk: BackendSDK,
+    target: EngineRequest,
+    config: EngineConfig,
+  ): Promise<Result<SessionDescriptor>> => {
+    if (typeof target.url !== "string" || target.url.length === 0) {
+      return err("A target request with a URL is required.");
+    }
+    const session = store.createSession(target, config);
+    sdk.api.send("mining:event", {
+      type: "state",
+      state: "running",
+      phase: "learning",
+    });
+    sdk.api.send("mining:event", {
+      type: "log",
+      level: "info",
+      message: `Started mining session ${session.id}`,
+    });
+    return ok(session);
+  };
+
+export const apiCancelSession =
+  (store: ParamFinderStore) =>
+  async (sdk: BackendSDK, id: string): Promise<Result<void>> => {
+    const session = store.cancelSession(id);
+    if (session === undefined) {
+      return err(`Session ${id} not found`);
+    }
+    sdk.api.send("mining:event", {
+      type: "state",
+      state: "canceled",
+      phase: "learning",
+    });
+    return ok(undefined);
+  };
+
+export const apiLearn =
+  (_store: ParamFinderStore) =>
+  async (
+    _sdk: BackendSDK,
+    _request: EngineRequest,
+    _config: EngineConfig,
+  ): Promise<Result<BaselineProfile>> =>
+    err(ENGINE_UNAVAILABLE);
+
+export const apiDiscover =
+  (_store: ParamFinderStore) =>
+  async (
+    _sdk: BackendSDK,
+    _request: EngineRequest,
+    _words: string[],
+    _config: EngineConfig,
+  ): Promise<Result<Finding[]>> =>
+    err(ENGINE_UNAVAILABLE);
diff --git a/packages/plugins/paramfinder/backend/src/index.ts b/packages/plugins/paramfinder/backend/src/index.ts
new file mode 100644
index 0000000..51ba96a
--- /dev/null
+++ b/packages/plugins/paramfinder/backend/src/index.ts
@@ -0,0 +1,20 @@
+import {
+  apiCancelSession,
+  apiDiscover,
+  apiLearn,
+  apiStartMining,
+} from "./api/index.js";
+import { setSDK } from "./sdk.js";
+import { createParamFinderStore } from "./stores/paramfinderStore.js";
+import type { BackendSDK } from "./types.js";
+
+export async function init(sdk: BackendSDK): Promise<void> {
+  setSDK(sdk);
+
+  const store = createParamFinderStore();
+
+  sdk.api.register("startMining", apiStartMining(store));
+  sdk.api.register("cancelSession", apiCancelSession(store));
+  sdk.api.register("learn", apiLearn(store));
+  sdk.api.register("discover", apiDiscover(store));
+}
diff --git a/packages/plugins/paramfinder/backend/src/sdk.ts b/packages/plugins/paramfinder/backend/src/sdk.ts
new file mode 100644
index 0000000..2ba415d
--- /dev/null
+++ b/packages/plugins/paramfinder/backend/src/sdk.ts
@@ -0,0 +1,7 @@
+import type { BackendSDK } from "./types.js";
+
+let sdk: BackendSDK | undefined;
+
+export const setSDK = (value: BackendSDK): void => {
+  sdk = value;
+};
diff --git a/packages/plugins/paramfinder/backend/src/stores/paramfinderStore.ts b/packages/plugins/paramfinder/backend/src/stores/paramfinderStore.ts
new file mode 100644
index 0000000..49360b7
--- /dev/null
+++ b/packages/plugins/paramfinder/backend/src/stores/paramfinderStore.ts
@@ -0,0 +1,47 @@
+import type { SessionDescriptor } from "../../../src/api.js";
+import type { EngineConfig } from "../../../src/config-schema.js";
+import type { EngineRequest } from "../../../src/types.js";
+
+export type ParamFinderStore = {
+  listSessions(): SessionDescriptor[];
+  getSession(id: string): SessionDescriptor | undefined;
+  createSession(target: EngineRequest, config: EngineConfig): SessionDescriptor;
+  cancelSession(id: string): SessionDescriptor | undefined;
+};
+
+const clone = <T>(value: T): T => JSON.parse(JSON.stringify(value)) as T;
+
+let counter = 0;
+
+export const createParamFinderStore = (): ParamFinderStore => {
+  const sessions = new Map<string, SessionDescriptor>();
+
+  return {
+    listSessions: () => [...sessions.values()].map(clone),
+    getSession: (id) => {
+      const session = sessions.get(id);
+      return session === undefined ? undefined : clone(session);
+    },
+    createSession: (_target, _config) => {
+      const session: SessionDescriptor = {
+        id: `session-${Date.now()}-${++counter}`,
+        state: "running",
+        phase: "learning",
+      };
+      sessions.set(session.id, session);
+      return clone(session);
+    },
+    cancelSession: (id) => {
+      const session = sessions.get(id);
+      if (session === undefined) {
+        return undefined;
+      }
+      const canceled: SessionDescriptor = {
+        ...session,
+        state: "canceled",
+      };
+      sessions.set(id, canceled);
+      return clone(canceled);
+    },
+  };
+};
diff --git a/packages/plugins/paramfinder/backend/src/types.ts b/packages/plugins/paramfinder/backend/src/types.ts
new file mode 100644
index 0000000..0bf2714
--- /dev/null
+++ b/packages/plugins/paramfinder/backend/src/types.ts
@@ -0,0 +1,5 @@
+import type { SDK } from "threatmap:plugin";
+
+import type { Spec } from "../../src/index.js";
+
+export type BackendSDK = SDK<Spec>;
diff --git a/packages/plugins/paramfinder/frontend/src/index.ts b/packages/plugins/paramfinder/frontend/src/index.ts
new file mode 100644
index 0000000..2add506
--- /dev/null
+++ b/packages/plugins/paramfinder/frontend/src/index.ts
@@ -0,0 +1,18 @@
+import { SettingsSlot } from "@threatmap/sdk-frontend";
+
+import { createSettingsSlotContent } from "../../src/ui/index.js";
+
+import type { FrontendSDK } from "./types.js";
+
+export type { FrontendSDK } from "./types.js";
+export { SettingsView } from "./views/SettingsView.js";
+
+export const init = (sdk: FrontendSDK): void => {
+  sdk.settings.addToSlot(
+    SettingsSlot.PluginsSection,
+    createSettingsSlotContent(),
+  );
+  sdk.sidebar.registerItem("ParamFinder", "/paramfinder", {
+    icon: "fas fa-magnifying-glass",
+  });
+};
diff --git a/packages/plugins/paramfinder/frontend/src/types.ts b/packages/plugins/paramfinder/frontend/src/types.ts
new file mode 100644
index 0000000..99b052c
--- /dev/null
+++ b/packages/plugins/paramfinder/frontend/src/types.ts
@@ -0,0 +1,5 @@
+import type { API as FrontendAPI } from "@threatmap/sdk-frontend";
+
+import type { Spec } from "../../src/index.js";
+
+export type FrontendSDK = FrontendAPI<Spec, Spec["events"]>;
diff --git a/packages/plugins/paramfinder/frontend/src/views/SettingsView.ts b/packages/plugins/paramfinder/frontend/src/views/SettingsView.ts
new file mode 100644
index 0000000..0b532f6
--- /dev/null
+++ b/packages/plugins/paramfinder/frontend/src/views/SettingsView.ts
@@ -0,0 +1 @@
+export { default as SettingsView } from "../../../src/ui/Settings.js";
diff --git a/packages/plugins/paramfinder/package.json b/packages/plugins/paramfinder/package.json
index e528406..641d5f4 100644
--- a/packages/plugins/paramfinder/package.json
+++ b/packages/plugins/paramfinder/package.json
@@ -13,6 +13,21 @@
       "types": "./dist/index.d.mts",
       "import": "./dist/index.mjs",
       "default": "./dist/index.mjs"
+    },
+    "./ui": {
+      "types": "./dist/ui/index.d.mts",
+      "import": "./dist/ui/index.mjs",
+      "default": "./dist/ui/index.mjs"
+    },
+    "./backend": {
+      "types": "./dist/backend/index.d.mts",
+      "import": "./dist/backend/index.mjs",
+      "default": "./dist/backend/index.mjs"
+    },
+    "./frontend": {
+      "types": "./dist/frontend/index.d.mts",
+      "import": "./dist/frontend/index.mjs",
+      "default": "./dist/frontend/index.mjs"
     }
   },
   "files": [
@@ -25,7 +40,11 @@
   },
   "dependencies": {
     "@threatmap/sdk-shared": "workspace:*",
-    "zod": "4.3.6"
+    "zod": "4.3.6",
+    "@threatmap/sdk-frontend": "workspace:*",
+    "primevue": "4.1.0",
+    "vue": "3.4.33",
+    "@threatmap/sdk-backend": "workspace:*"
   },
   "devDependencies": {
     "tsdown": "0.20.1",
diff --git a/packages/plugins/paramfinder/src/ui/Settings.ts b/packages/plugins/paramfinder/src/ui/Settings.ts
new file mode 100644
index 0000000..399ade3
--- /dev/null
+++ b/packages/plugins/paramfinder/src/ui/Settings.ts
@@ -0,0 +1,194 @@
+import type { API as FrontendAPI } from "@threatmap/sdk-frontend";
+import Button from "primevue/button";
+import InputText from "primevue/inputtext";
+import Textarea from "primevue/textarea";
+import {
+  defineComponent,
+  h,
+  onBeforeUnmount,
+  onMounted,
+  type PropType,
+  ref,
+} from "vue";
+
+import type { Spec } from "../index.js";
+
+export type ParamFinderSdk = FrontendAPI<Spec, Spec["events"]>;
+
+const DEFAULT_REQUEST = JSON.stringify(
+  {
+    id: "req-1",
+    host: "example.com",
+    port: 443,
+    url: "/",
+    path: "/",
+    query: "",
+    method: "GET",
+    headers: {},
+    body: "",
+    tls: true,
+    raw: "",
+    context: "discovery",
+  },
+  null,
+  2,
+);
+
+export default defineComponent({
+  name: "ParamFinderSettingsView",
+  props: {
+    sdk: { type: Object as PropType<ParamFinderSdk>, required: true },
+  },
+  setup(props) {
+    const request = ref(DEFAULT_REQUEST);
+    const config = ref("{}");
+    const words = ref("");
+    const sessionId = ref<string | undefined>();
+    const log = ref<string[]>([]);
+    const findings = ref<string>("");
+    const error = ref<string | undefined>();
+    const miningHandle = ref<{ stop: () => void }>();
+
+    const appendLog = (line: string): void => {
+      log.value = [...log.value.slice(-49), line];
+    };
+
+    const common = async (): Promise<
+      { ok: true; request: unknown; config: unknown } | { ok: false }
+    > => {
+      try {
+        return {
+          ok: true,
+          request: JSON.parse(request.value),
+          config: JSON.parse(config.value),
+        };
+      } catch {
+        error.value = "Request or config JSON is invalid";
+        return { ok: false };
+      }
+    };
+
+    const mine = async (): Promise<void> => {
+      const parsed = await common();
+      if (!parsed.ok) return;
+      const result = await props.sdk.backend.startMining(
+        parsed.request as Parameters<
+          ParamFinderSdk["backend"]["startMining"]
+        >[0],
+        parsed.config as Parameters<
+          ParamFinderSdk["backend"]["startMining"]
+        >[1],
+      );
+      if (result.kind === "Ok") {
+        sessionId.value = result.value.id;
+        appendLog(`Session ${result.value.id} (${result.value.phase})`);
+      } else {
+        error.value = result.error;
+      }
+    };
+
+    const discover = async (): Promise<void> => {
+      const parsed = await common();
+      if (!parsed.ok) return;
+      const wordList = words.value
+        .split(/[\n,]/u)
+        .map((word) => word.trim())
+        .filter((word) => word.length > 0);
+      const result = await props.sdk.backend.discover(
+        parsed.request as Parameters<ParamFinderSdk["backend"]["discover"]>[0],
+        wordList,
+        parsed.config as Parameters<ParamFinderSdk["backend"]["discover"]>[2],
+      );
+      if (result.kind === "Ok") {
+        findings.value = JSON.stringify(result.value, null, 2);
+        appendLog(`${result.value.length} finding(s)`);
+      } else {
+        error.value = result.error;
+      }
+    };
+
+    const cancel = async (): Promise<void> => {
+      if (sessionId.value === undefined || sessionId.value.length === 0) return;
+      const result = await props.sdk.backend.cancelSession(sessionId.value);
+      if (result.kind !== "Ok") error.value = result.error;
+      appendLog(`Canceled ${sessionId.value}`);
+      sessionId.value = undefined;
+    };
+
+    onMounted(() => {
+      miningHandle.value = props.sdk.backend.onEvent(
+        "mining:event",
+        (event) => {
+          if (event.type === "log")
+            appendLog(`[${event.level}] ${event.message}`);
+          else if (event.type === "state")
+            appendLog(`state: ${event.state}/${event.phase}`);
+          else if (event.type === "finding")
+            appendLog(
+              `finding: ${JSON.stringify(event.finding).slice(0, 120)}`,
+            );
+          else if (event.type === "completed") appendLog("completed");
+        },
+      );
+    });
+
+    onBeforeUnmount(() => {
+      miningHandle.value?.stop();
+    });
+
+    return () =>
+      h("div", { class: "flex max-w-2xl flex-col gap-4 p-4" }, [
+        h("h2", { class: "text-lg font-semibold" }, "ParamFinder"),
+        error.value !== undefined
+          ? h("p", { class: "text-sm text-red-500" }, error.value)
+          : null,
+        h("h3", { class: "font-medium" }, "Engine request (JSON)"),
+        h(Textarea, {
+          modelValue: request.value,
+          rows: 10,
+          "onUpdate:modelValue": (value: string) => {
+            request.value = value;
+          },
+        }),
+        h("h3", { class: "font-medium" }, "Engine config (JSON)"),
+        h(Textarea, {
+          modelValue: config.value,
+          rows: 4,
+          "onUpdate:modelValue": (value: string) => {
+            config.value = value;
+          },
+        }),
+        h("h3", { class: "font-medium" }, "Words"),
+        h(InputText, {
+          modelValue: words.value,
+          placeholder: "Comma or newline separated",
+          "onUpdate:modelValue": (value: string) => {
+            words.value = value;
+          },
+        }),
+        h("div", { class: "flex gap-2" }, [
+          h(Button, { label: "Start mining", onClick: () => void mine() }),
+          h(Button, { label: "Discover", onClick: () => void discover() }),
+          h(Button, {
+            label: "Cancel",
+            severity: "danger",
+            text: true,
+            onClick: () => void cancel(),
+          }),
+        ]),
+        h("h3", { class: "font-medium" }, "Event log"),
+        h(
+          "pre",
+          { class: "max-h-40 overflow-auto text-xs" },
+          log.value.join("\n"),
+        ),
+        findings.value.length > 0
+          ? h(
+              "pre",
+              { class: "max-h-60 overflow-auto text-xs" },
+              findings.value,
+            )
+          : null,
+      ]);
+  },
+});
diff --git a/packages/plugins/paramfinder/src/ui/index.ts b/packages/plugins/paramfinder/src/ui/index.ts
new file mode 100644
index 0000000..d0a2736
--- /dev/null
+++ b/packages/plugins/paramfinder/src/ui/index.ts
@@ -0,0 +1,15 @@
+import type { SettingsPluginSlotContent } from "@threatmap/sdk-frontend";
+
+import SettingsView from "./Settings.js";
+
+export { default as SettingsView } from "./Settings.js";
+export type { ParamFinderSdk } from "./Settings.js";
+
+export const createSettingsSlotContent = (): SettingsPluginSlotContent => ({
+  type: "Custom",
+  name: "ParamFinder",
+  definition: {
+    component:
+      SettingsView as unknown as SettingsPluginSlotContent["definition"]["component"],
+  },
+});
diff --git a/packages/plugins/paramfinder/tsconfig.json b/packages/plugins/paramfinder/tsconfig.json
index 3977b85..d29d85d 100644
--- a/packages/plugins/paramfinder/tsconfig.json
+++ b/packages/plugins/paramfinder/tsconfig.json
@@ -1,7 +1,14 @@
 {
   "extends": "../../../tsconfig.json",
   "compilerOptions": {
-    "isolatedDeclarations": false
+    "isolatedDeclarations": false,
+    "types": [
+      "@threatmap/sdk-backend"
+    ]
   },
-  "include": ["./src/**/*.ts"]
+  "include": [
+    "./src/**/*.ts",
+    "./backend/src/**/*.ts",
+    "./frontend/src/**/*.ts"
+  ]
 }
diff --git a/packages/plugins/paramfinder/tsdown.config.ts b/packages/plugins/paramfinder/tsdown.config.ts
index 8650aef..e130db2 100644
--- a/packages/plugins/paramfinder/tsdown.config.ts
+++ b/packages/plugins/paramfinder/tsdown.config.ts
@@ -1,13 +1,25 @@
 import { defineConfig } from "tsdown";
 
 export default defineConfig({
-  entry: ["./src/index.ts"],
+  entry: {
+    index: "./src/index.ts",
+    "ui/index": "./src/ui/index.ts",
+    "backend/index": "./backend/src/index.ts",
+    "frontend/index": "./frontend/src/index.ts",
+  },
   platform: "node",
   format: "esm",
   dts: true,
   sourcemap: true,
   clean: true,
   deps: {
-    neverBundle: ["zod", "@threatmap/sdk-shared"],
+    neverBundle: [
+      "zod",
+      "@threatmap/sdk-shared",
+      "@threatmap/sdk-frontend",
+      "@threatmap/sdk-backend",
+      "vue",
+      "primevue",
+    ],
   },
 });
diff --git a/packages/plugins/quickssrf/backend/src/api/index.ts b/packages/plugins/quickssrf/backend/src/api/index.ts
new file mode 100644
index 0000000..bee4ef5
--- /dev/null
+++ b/packages/plugins/quickssrf/backend/src/api/index.ts
@@ -0,0 +1,210 @@
+import type { QuickSSRFConfig, UpdateConfig } from "../../../src/config.js";
+import type { Interaction } from "../../../src/interaction.js";
+import type {
+  CreateProvider,
+  Provider,
+  UpdateProvider,
+} from "../../../src/provider.js";
+import type { Result } from "../../../src/result.js";
+import type { Session } from "../../../src/session.js";
+import type { QuickSSRFStore } from "../stores/quickssrfStore.js";
+import type { BackendSDK } from "../types.js";
+
+const ok = <T>(value: T): Result<T> => ({ kind: "Ok", value });
+const err = <T>(error: string): Result<T> => ({ kind: "Error", error });
+
+export const apiCreateSession =
+  (store: QuickSSRFStore) =>
+  async (sdk: BackendSDK, providerId?: string): Promise<Result<Session>> => {
+    const session = store.createSession(providerId);
+    if (session === undefined) {
+      return err("No provider available");
+    }
+    sdk.api.send("session:created", session);
+    return ok(session);
+  };
+
+export const apiGetSessions =
+  (store: QuickSSRFStore) => async (): Promise<Result<Session[]>> =>
+    ok(store.listSessions());
+
+export const apiGetSession =
+  (store: QuickSSRFStore) =>
+  async (_sdk: BackendSDK, sessionId: string): Promise<Result<Session>> => {
+    const session = store.getSession(sessionId);
+    return session === undefined
+      ? err(`Session ${sessionId} not found`)
+      : ok(session);
+  };
+
+export const apiDeleteSession =
+  (store: QuickSSRFStore) =>
+  async (sdk: BackendSDK, sessionId: string): Promise<Result<void>> => {
+    if (!store.deleteSession(sessionId)) {
+      return err(`Session ${sessionId} not found`);
+    }
+    sdk.api.send("session:deleted", sessionId);
+    return ok(undefined);
+  };
+
+export const apiStopSession =
+  (store: QuickSSRFStore) =>
+  async (sdk: BackendSDK, sessionId: string): Promise<Result<void>> => {
+    const session = store.updateSession(sessionId, { status: "stopped" });
+    if (session === undefined) {
+      return err(`Session ${sessionId} not found`);
+    }
+    sdk.api.send("session:updated", session);
+    return ok(undefined);
+  };
+
+export const apiResumeSession =
+  (store: QuickSSRFStore) =>
+  (sdk: BackendSDK, sessionId: string): Result<void> => {
+    const session = store.updateSession(sessionId, { status: "active" });
+    if (session === undefined) {
+      return err(`Session ${sessionId} not found`);
+    }
+    sdk.api.send("session:updated", session);
+    return ok(undefined);
+  };
+
+export const apiPollSession =
+  (store: QuickSSRFStore) =>
+  async (
+    _sdk: BackendSDK,
+    sessionId: string,
+  ): Promise<Result<Interaction[]>> => {
+    const session = store.getSession(sessionId);
+    if (session === undefined) {
+      return err(`Session ${sessionId} not found`);
+    }
+    return ok(store.listInteractions(sessionId));
+  };
+
+export const apiUpdateSessionTitle =
+  (store: QuickSSRFStore) =>
+  async (
+    sdk: BackendSDK,
+    sessionId: string,
+    title: string,
+  ): Promise<Result<Session>> => {
+    const session = store.updateSession(sessionId, { title });
+    if (session === undefined) {
+      return err(`Session ${sessionId} not found`);
+    }
+    sdk.api.send("session:updated", session);
+    return ok(session);
+  };
+
+export const apiGetActiveSessionIds =
+  (store: QuickSSRFStore) => (): Result<string[]> =>
+    ok(
+      store
+        .listSessions()
+        .filter(
+          (session) =>
+            session.status === "active" || session.status === "polling",
+        )
+        .map((session) => session.id),
+    );
+
+export const apiGetProviders =
+  (store: QuickSSRFStore) => (): Result<Provider[]> =>
+    ok(store.listProviders());
+
+export const apiGetProvider =
+  (store: QuickSSRFStore) =>
+  (_sdk: BackendSDK, providerId: string): Result<Provider> => {
+    const provider = store.getProvider(providerId);
+    return provider === undefined
+      ? err(`Provider ${providerId} not found`)
+      : ok(provider);
+  };
+
+export const apiAddProvider =
+  (store: QuickSSRFStore) =>
+  async (sdk: BackendSDK, input: CreateProvider): Promise<Result<Provider>> => {
+    const provider = store.addProvider(input);
+    sdk.api.send("provider:created", provider);
+    return ok(provider);
+  };
+
+export const apiUpdateProvider =
+  (store: QuickSSRFStore) =>
+  async (
+    sdk: BackendSDK,
+    providerId: string,
+    updates: UpdateProvider,
+  ): Promise<Result<Provider>> => {
+    const provider = store.updateProvider(providerId, updates);
+    if (provider === undefined) {
+      return err(`Provider ${providerId} not found`);
+    }
+    sdk.api.send("provider:updated", provider);
+    return ok(provider);
+  };
+
+export const apiDeleteProvider =
+  (store: QuickSSRFStore) =>
+  async (sdk: BackendSDK, providerId: string): Promise<Result<void>> => {
+    if (!store.deleteProvider(providerId)) {
+      return err(`Provider ${providerId} not found`);
+    }
+    sdk.api.send("provider:deleted", providerId);
+    return ok(undefined);
+  };
+
+export const apiGetInteractions =
+  (store: QuickSSRFStore) =>
+  async (_sdk: BackendSDK, sessionId: string): Promise<Result<Interaction[]>> =>
+    ok(store.listInteractions(sessionId));
+
+export const apiDeleteInteraction =
+  (store: QuickSSRFStore) =>
+  async (
+    _sdk: BackendSDK,
+    sessionId: string,
+    interactionId: string,
+  ): Promise<Result<void>> => {
+    if (!store.deleteInteraction(sessionId, interactionId)) {
+      return err(`Interaction ${interactionId} not found`);
+    }
+    return ok(undefined);
+  };
+
+export const apiClearInteractions =
+  (store: QuickSSRFStore) =>
+  async (_sdk: BackendSDK, sessionId: string): Promise<Result<void>> => {
+    store.clearInteractions(sessionId);
+    return ok(undefined);
+  };
+
+export const apiGetConfig =
+  (store: QuickSSRFStore) => (): Result<QuickSSRFConfig> =>
+    ok(store.getConfig());
+
+export const apiUpdateConfig =
+  (store: QuickSSRFStore) =>
+  async (
+    sdk: BackendSDK,
+    updates: UpdateConfig,
+  ): Promise<Result<QuickSSRFConfig>> => {
+    const config = store.updateConfig(updates);
+    sdk.api.send("config:updated", config);
+    return ok(config);
+  };
+
+export const apiStartPolling = (store: QuickSSRFStore) => (): Result<void> => {
+  store.polling = true;
+  return ok(undefined);
+};
+
+export const apiStopPolling = (store: QuickSSRFStore) => (): Result<void> => {
+  store.polling = false;
+  return ok(undefined);
+};
+
+export const apiGetPollingStatus =
+  (store: QuickSSRFStore) => (): Result<boolean> =>
+    ok(store.polling);
diff --git a/packages/plugins/quickssrf/backend/src/index.ts b/packages/plugins/quickssrf/backend/src/index.ts
new file mode 100644
index 0000000..7d75d48
--- /dev/null
+++ b/packages/plugins/quickssrf/backend/src/index.ts
@@ -0,0 +1,60 @@
+import {
+  apiAddProvider,
+  apiClearInteractions,
+  apiCreateSession,
+  apiDeleteInteraction,
+  apiDeleteProvider,
+  apiDeleteSession,
+  apiGetActiveSessionIds,
+  apiGetConfig,
+  apiGetInteractions,
+  apiGetPollingStatus,
+  apiGetProvider,
+  apiGetProviders,
+  apiGetSession,
+  apiGetSessions,
+  apiPollSession,
+  apiResumeSession,
+  apiStartPolling,
+  apiStopPolling,
+  apiStopSession,
+  apiUpdateConfig,
+  apiUpdateProvider,
+  apiUpdateSessionTitle,
+} from "./api/index.js";
+import { setSDK } from "./sdk.js";
+import { createQuickSSRFStore } from "./stores/quickssrfStore.js";
+import type { BackendSDK } from "./types.js";
+
+export async function init(sdk: BackendSDK): Promise<void> {
+  setSDK(sdk);
+
+  const store = createQuickSSRFStore();
+
+  sdk.api.register("createSession", apiCreateSession(store));
+  sdk.api.register("getSessions", apiGetSessions(store));
+  sdk.api.register("getSession", apiGetSession(store));
+  sdk.api.register("deleteSession", apiDeleteSession(store));
+  sdk.api.register("stopSession", apiStopSession(store));
+  sdk.api.register("resumeSession", apiResumeSession(store));
+  sdk.api.register("pollSession", apiPollSession(store));
+  sdk.api.register("updateSessionTitle", apiUpdateSessionTitle(store));
+  sdk.api.register("getActiveSessionIds", apiGetActiveSessionIds(store));
+
+  sdk.api.register("getProviders", apiGetProviders(store));
+  sdk.api.register("getProvider", apiGetProvider(store));
+  sdk.api.register("addProvider", apiAddProvider(store));
+  sdk.api.register("updateProvider", apiUpdateProvider(store));
+  sdk.api.register("deleteProvider", apiDeleteProvider(store));
+
+  sdk.api.register("getInteractions", apiGetInteractions(store));
+  sdk.api.register("deleteInteraction", apiDeleteInteraction(store));
+  sdk.api.register("clearInteractions", apiClearInteractions(store));
+
+  sdk.api.register("getConfig", apiGetConfig(store));
+  sdk.api.register("updateConfig", apiUpdateConfig(store));
+
+  sdk.api.register("startPolling", apiStartPolling(store));
+  sdk.api.register("stopPolling", apiStopPolling(store));
+  sdk.api.register("getPollingStatus", apiGetPollingStatus(store));
+}
diff --git a/packages/plugins/quickssrf/backend/src/sdk.ts b/packages/plugins/quickssrf/backend/src/sdk.ts
new file mode 100644
index 0000000..2ba415d
--- /dev/null
+++ b/packages/plugins/quickssrf/backend/src/sdk.ts
@@ -0,0 +1,7 @@
+import type { BackendSDK } from "./types.js";
+
+let sdk: BackendSDK | undefined;
+
+export const setSDK = (value: BackendSDK): void => {
+  sdk = value;
+};
diff --git a/packages/plugins/quickssrf/backend/src/stores/quickssrfStore.ts b/packages/plugins/quickssrf/backend/src/stores/quickssrfStore.ts
new file mode 100644
index 0000000..d9b946f
--- /dev/null
+++ b/packages/plugins/quickssrf/backend/src/stores/quickssrfStore.ts
@@ -0,0 +1,160 @@
+import {
+  DEFAULT_CONFIG,
+  type QuickSSRFConfig,
+  type UpdateConfig,
+} from "../../../src/config.js";
+import type { Interaction } from "../../../src/interaction.js";
+import type {
+  CreateProvider,
+  Provider,
+  UpdateProvider,
+} from "../../../src/provider.js";
+import { DEFAULT_PROVIDERS } from "../../../src/provider.js";
+import type { Session } from "../../../src/session.js";
+
+export type QuickSSRFStore = {
+  createSession(providerId?: string): Session | undefined;
+  listSessions(): Session[];
+  getSession(sessionId: string): Session | undefined;
+  deleteSession(sessionId: string): boolean;
+  updateSession(
+    sessionId: string,
+    updates: Partial<Session>,
+  ): Session | undefined;
+  listProviders(): Provider[];
+  getProvider(providerId: string): Provider | undefined;
+  addProvider(input: CreateProvider): Provider;
+  updateProvider(
+    providerId: string,
+    updates: UpdateProvider,
+  ): Provider | undefined;
+  deleteProvider(providerId: string): boolean;
+  listInteractions(sessionId: string): Interaction[];
+  deleteInteraction(sessionId: string, interactionId: string): boolean;
+  clearInteractions(sessionId: string): void;
+  getConfig(): QuickSSRFConfig;
+  updateConfig(updates: UpdateConfig): QuickSSRFConfig;
+  polling: boolean;
+};
+
+const clone = <T>(value: T): T => JSON.parse(JSON.stringify(value)) as T;
+
+let sessionCounter = 0;
+let providerCounter = 0;
+
+export const createQuickSSRFStore = (): QuickSSRFStore => {
+  let sessions: Session[] = [];
+  let interactions: Interaction[] = [];
+  let providers: Provider[] = DEFAULT_PROVIDERS.map((provider, index) => ({
+    id: `provider-${index + 1}`,
+    ...clone(provider),
+  }));
+  let config: QuickSSRFConfig = clone(DEFAULT_CONFIG);
+
+  return {
+    polling: false,
+    createSession: (providerId) => {
+      const provider =
+        providerId !== undefined
+          ? providers.find((candidate) => candidate.id === providerId)
+          : providers[0];
+      if (provider === undefined) {
+        return undefined;
+      }
+      const session: Session = {
+        id: `session-${Date.now()}-${++sessionCounter}`,
+        providerId: provider.id,
+        providerKind: provider.kind,
+        title: `${provider.name} session`,
+        url: provider.url,
+        status: "active",
+        createdAt: new Date().toISOString(),
+        interactionCount: 0,
+      };
+      sessions = [...sessions, session];
+      return clone(session);
+    },
+    listSessions: () => clone(sessions),
+    getSession: (sessionId) => {
+      const session = sessions.find((candidate) => candidate.id === sessionId);
+      return session === undefined ? undefined : clone(session);
+    },
+    deleteSession: (sessionId) => {
+      const before = sessions.length;
+      sessions = sessions.filter((session) => session.id !== sessionId);
+      interactions = interactions.filter(
+        (interaction) => interaction.sessionId !== sessionId,
+      );
+      return sessions.length < before;
+    },
+    updateSession: (sessionId, updates) => {
+      const session = sessions.find((candidate) => candidate.id === sessionId);
+      if (session === undefined) {
+        return undefined;
+      }
+      const updated = { ...session, ...updates, id: session.id };
+      sessions = sessions.map((candidate) =>
+        candidate.id === sessionId ? updated : candidate,
+      );
+      return clone(updated);
+    },
+    listProviders: () => clone(providers),
+    getProvider: (providerId) => {
+      const provider = providers.find(
+        (candidate) => candidate.id === providerId,
+      );
+      return provider === undefined ? undefined : clone(provider);
+    },
+    addProvider: (input) => {
+      const provider: Provider = {
+        id: `provider-${Date.now()}-${++providerCounter}`,
+        ...input,
+      };
+      providers = [...providers, provider];
+      return clone(provider);
+    },
+    updateProvider: (providerId, updates) => {
+      const provider = providers.find(
+        (candidate) => candidate.id === providerId,
+      );
+      if (provider === undefined) {
+        return undefined;
+      }
+      const updated = { ...provider, ...updates, id: provider.id };
+      providers = providers.map((candidate) =>
+        candidate.id === providerId ? updated : candidate,
+      );
+      return clone(updated);
+    },
+    deleteProvider: (providerId) => {
+      const before = providers.length;
+      providers = providers.filter((candidate) => candidate.id !== providerId);
+      return providers.length < before;
+    },
+    listInteractions: (sessionId) =>
+      clone(
+        interactions.filter(
+          (interaction) => interaction.sessionId === sessionId,
+        ),
+      ),
+    deleteInteraction: (sessionId, interactionId) => {
+      const before = interactions.length;
+      interactions = interactions.filter(
+        (interaction) =>
+          interaction.sessionId !== sessionId ||
+          interaction.id !== interactionId,
+      );
+      return interactions.length < before;
+    },
+    clearInteractions: (sessionId) => {
+      interactions = interactions.filter(
+        (interaction) => interaction.sessionId !== sessionId,
+      );
+    },
+    getConfig: () => clone(config),
+    updateConfig: (updates) => {
+      config = { ...config, ...updates };
+      return clone(config);
+    },
+  };
+};
diff --git a/packages/plugins/quickssrf/backend/src/types.ts b/packages/plugins/quickssrf/backend/src/types.ts
new file mode 100644
index 0000000..0bf2714
--- /dev/null
+++ b/packages/plugins/quickssrf/backend/src/types.ts
@@ -0,0 +1,5 @@
+import type { SDK } from "threatmap:plugin";
+
+import type { Spec } from "../../src/index.js";
+
+export type BackendSDK = SDK<Spec>;
diff --git a/packages/plugins/quickssrf/frontend/src/index.ts b/packages/plugins/quickssrf/frontend/src/index.ts
new file mode 100644
index 0000000..bd4f4d9
--- /dev/null
+++ b/packages/plugins/quickssrf/frontend/src/index.ts
@@ -0,0 +1,18 @@
+import { SettingsSlot } from "@threatmap/sdk-frontend";
+
+import { createSettingsSlotContent } from "../../src/ui/index.js";
+
+import type { FrontendSDK } from "./types.js";
+
+export type { FrontendSDK } from "./types.js";
+export { SettingsView } from "./views/SettingsView.js";
+
+export const init = (sdk: FrontendSDK): void => {
+  sdk.settings.addToSlot(
+    SettingsSlot.PluginsSection,
+    createSettingsSlotContent(),
+  );
+  sdk.sidebar.registerItem("QuickSSRF", "/quickssrf", {
+    icon: "fas fa-satellite-dish",
+  });
+};
diff --git a/packages/plugins/quickssrf/frontend/src/types.ts b/packages/plugins/quickssrf/frontend/src/types.ts
new file mode 100644
index 0000000..99b052c
--- /dev/null
+++ b/packages/plugins/quickssrf/frontend/src/types.ts
@@ -0,0 +1,5 @@
+import type { API as FrontendAPI } from "@threatmap/sdk-frontend";
+
+import type { Spec } from "../../src/index.js";
+
+export type FrontendSDK = FrontendAPI<Spec, Spec["events"]>;
diff --git a/packages/plugins/quickssrf/frontend/src/views/SettingsView.ts b/packages/plugins/quickssrf/frontend/src/views/SettingsView.ts
new file mode 100644
index 0000000..0b532f6
--- /dev/null
+++ b/packages/plugins/quickssrf/frontend/src/views/SettingsView.ts
@@ -0,0 +1 @@
+export { default as SettingsView } from "../../../src/ui/Settings.js";
diff --git a/packages/plugins/quickssrf/package.json b/packages/plugins/quickssrf/package.json
index 06af04d..a9476cf 100644
--- a/packages/plugins/quickssrf/package.json
+++ b/packages/plugins/quickssrf/package.json
@@ -12,6 +12,21 @@
       "types": "./dist/index.d.mts",
       "import": "./dist/index.mjs",
       "default": "./dist/index.mjs"
+    },
+    "./ui": {
+      "types": "./dist/ui/index.d.mts",
+      "import": "./dist/ui/index.mjs",
+      "default": "./dist/ui/index.mjs"
+    },
+    "./backend": {
+      "types": "./dist/backend/index.d.mts",
+      "import": "./dist/backend/index.mjs",
+      "default": "./dist/backend/index.mjs"
+    },
+    "./frontend": {
+      "types": "./dist/frontend/index.d.mts",
+      "import": "./dist/frontend/index.mjs",
+      "default": "./dist/frontend/index.mjs"
     }
   },
   "files": [
@@ -24,6 +39,10 @@
   },
   "dependencies": {
     "@threatmap/sdk-shared": "workspace:*",
-    "zod": "4.3.6"
+    "zod": "4.3.6",
+    "@threatmap/sdk-frontend": "workspace:*",
+    "primevue": "4.1.0",
+    "vue": "3.4.33",
+    "@threatmap/sdk-backend": "workspace:*"
   }
-}
\ No newline at end of file
+}
diff --git a/packages/plugins/quickssrf/src/ui/Settings.ts b/packages/plugins/quickssrf/src/ui/Settings.ts
new file mode 100644
index 0000000..727ce6a
--- /dev/null
+++ b/packages/plugins/quickssrf/src/ui/Settings.ts
@@ -0,0 +1,182 @@
+import type { API as FrontendAPI } from "@threatmap/sdk-frontend";
+import Button from "primevue/button";
+import Tag from "primevue/tag";
+import Textarea from "primevue/textarea";
+import {
+  defineComponent,
+  h,
+  onBeforeUnmount,
+  onMounted,
+  type PropType,
+  ref,
+} from "vue";
+
+import type { Spec } from "../index.js";
+import type { Session } from "../session.js";
+
+export type QuickSSRFSdk = FrontendAPI<Spec, Spec["events"]>;
+
+export default defineComponent({
+  name: "QuickSSRFSettingsView",
+  props: {
+    sdk: { type: Object as PropType<QuickSSRFSdk>, required: true },
+  },
+  setup(props) {
+    const sessions = ref<Session[]>([]);
+    const providers = ref<{ id: string; name: string; enabled: boolean }[]>([]);
+    const config = ref("");
+    const interactions = ref<number | undefined>();
+    const error = ref<string | undefined>();
+    const handles: { stop: () => void }[] = [];
+
+    const refresh = async (): Promise<void> => {
+      error.value = undefined;
+      try {
+        const sessionResult = await props.sdk.backend.getSessions();
+        if (sessionResult.kind === "Ok") sessions.value = sessionResult.value;
+        else error.value = sessionResult.error;
+
+        const providerResult = await props.sdk.backend.getProviders();
+        if (providerResult.kind === "Ok") {
+          providers.value = providerResult.value.map((provider) => ({
+            id: provider.id,
+            name: provider.name,
+            enabled: provider.enabled,
+          }));
+        }
+
+        const configResult = await props.sdk.backend.getConfig();
+        if (configResult.kind === "Ok") {
+          config.value = JSON.stringify(configResult.value, null, 2);
+        } else {
+          error.value = configResult.error;
+        }
+      } catch (cause) {
+        error.value = cause instanceof Error ? cause.message : String(cause);
+      }
+    };
+
+    const create = async (): Promise<void> => {
+      const result = await props.sdk.backend.createSession();
+      if (result.kind !== "Ok") error.value = result.error;
+      await refresh();
+    };
+
+    const stop = async (sessionId: string): Promise<void> => {
+      const result = await props.sdk.backend.stopSession(sessionId);
+      if (result.kind !== "Ok") error.value = result.error;
+      await refresh();
+    };
+
+    const resume = async (sessionId: string): Promise<void> => {
+      const result = await props.sdk.backend.resumeSession(sessionId);
+      if (result.kind !== "Ok") error.value = result.error;
+      await refresh();
+    };
+
+    const remove = async (sessionId: string): Promise<void> => {
+      const result = await props.sdk.backend.deleteSession(sessionId);
+      if (result.kind !== "Ok") error.value = result.error;
+      await refresh();
+    };
+
+    const poll = async (sessionId: string): Promise<void> => {
+      const result = await props.sdk.backend.pollSession(sessionId);
+      if (result.kind === "Ok") interactions.value = result.value.length;
+      else error.value = result.error;
+    };
+
+    const saveConfig = async (): Promise<void> => {
+      try {
+        const parsed = JSON.parse(config.value) as Parameters<
+          QuickSSRFSdk["backend"]["updateConfig"]
+        >[0];
+        const result = await props.sdk.backend.updateConfig(parsed);
+        if (result.kind !== "Ok") error.value = result.error;
+      } catch {
+        error.value = "Config is not valid JSON";
+      }
+    };
+
+    onMounted(() => {
+      void refresh();
+      handles.push(
+        props.sdk.backend.onEvent("session:created", () => void refresh()),
+        props.sdk.backend.onEvent("session:updated", () => void refresh()),
+        props.sdk.backend.onEvent("session:deleted", () => void refresh()),
+        props.sdk.backend.onEvent("config:updated", () => void refresh()),
+      );
+    });
+
+    onBeforeUnmount(() => {
+      for (const handle of handles) handle.stop();
+    });
+
+    return () =>
+      h("div", { class: "flex max-w-2xl flex-col gap-4 p-4" }, [
+        h("h2", { class: "text-lg font-semibold" }, "QuickSSRF"),
+        error.value !== undefined
+          ? h("p", { class: "text-sm text-red-500" }, error.value)
+          : null,
+        h("div", { class: "flex gap-2" }, [
+          h(Button, { label: "New session", onClick: () => void create() }),
+        ]),
+        h("h3", { class: "font-medium" }, "Sessions"),
+        h(
+          "ul",
+          { class: "flex flex-col gap-1" },
+          sessions.value.map((session) =>
+            h("li", { class: "flex flex-wrap items-center gap-2" }, [
+              h("span", session.title || session.id),
+              h(Tag, { value: session.status }),
+              h(Button, {
+                label: "Poll",
+                text: true,
+                onClick: () => void poll(session.id),
+              }),
+              h(Button, {
+                label: "Stop",
+                text: true,
+                onClick: () => void stop(session.id),
+              }),
+              h(Button, {
+                label: "Resume",
+                text: true,
+                onClick: () => void resume(session.id),
+              }),
+              h(Button, {
+                label: "Delete",
+                severity: "danger",
+                text: true,
+                onClick: () => void remove(session.id),
+              }),
+            ]),
+          ),
+        ),
+        interactions.value !== undefined
+          ? h("p", { class: "text-sm" }, `Interactions: ${interactions.value}`)
+          : null,
+        h("h3", { class: "font-medium" }, "Providers"),
+        h(
+          "ul",
+          {},
+          providers.value.map((provider) =>
+            h(
+              "li",
+              {},
+              `${provider.name} (${provider.enabled ? "enabled" : "disabled"})`,
+            ),
+          ),
+        ),
+        h("h3", { class: "font-medium" }, "Config (JSON)"),
+        h(Textarea, {
+          modelValue: config.value,
+          rows: 8,
+          "onUpdate:modelValue": (value: string) => {
+            config.value = value;
+          },
+        }),
+        h(Button, { label: "Save config", onClick: () => void saveConfig() }),
+      ]);
+  },
+});
diff --git a/packages/plugins/quickssrf/src/ui/index.ts b/packages/plugins/quickssrf/src/ui/index.ts
new file mode 100644
index 0000000..3dae4b4
--- /dev/null
+++ b/packages/plugins/quickssrf/src/ui/index.ts
@@ -0,0 +1,15 @@
+import type { SettingsPluginSlotContent } from "@threatmap/sdk-frontend";
+
+import SettingsView from "./Settings.js";
+
+export { default as SettingsView } from "./Settings.js";
+export type { QuickSSRFSdk } from "./Settings.js";
+
+export const createSettingsSlotContent = (): SettingsPluginSlotContent => ({
+  type: "Custom",
+  name: "QuickSSRF",
+  definition: {
+    component:
+      SettingsView as unknown as SettingsPluginSlotContent["definition"]["component"],
+  },
+});
diff --git a/packages/plugins/quickssrf/tsconfig.json b/packages/plugins/quickssrf/tsconfig.json
index 3977b85..d29d85d 100644
--- a/packages/plugins/quickssrf/tsconfig.json
+++ b/packages/plugins/quickssrf/tsconfig.json
@@ -1,7 +1,14 @@
 {
   "extends": "../../../tsconfig.json",
   "compilerOptions": {
-    "isolatedDeclarations": false
+    "isolatedDeclarations": false,
+    "types": [
+      "@threatmap/sdk-backend"
+    ]
   },
-  "include": ["./src/**/*.ts"]
+  "include": [
+    "./src/**/*.ts",
+    "./backend/src/**/*.ts",
+    "./frontend/src/**/*.ts"
+  ]
 }
diff --git a/packages/plugins/quickssrf/tsdown.config.ts b/packages/plugins/quickssrf/tsdown.config.ts
new file mode 100644
index 0000000..e130db2
--- /dev/null
+++ b/packages/plugins/quickssrf/tsdown.config.ts
@@ -0,0 +1,25 @@
+import { defineConfig } from "tsdown";
+
+export default defineConfig({
+  entry: {
+    index: "./src/index.ts",
+    "ui/index": "./src/ui/index.ts",
+    "backend/index": "./backend/src/index.ts",
+    "frontend/index": "./frontend/src/index.ts",
+  },
+  platform: "node",
+  format: "esm",
+  dts: true,
+  sourcemap: true,
+  clean: true,
+  deps: {
+    neverBundle: [
+      "zod",
+      "@threatmap/sdk-shared",
+      "@threatmap/sdk-frontend",
+      "@threatmap/sdk-backend",
+      "vue",
+      "primevue",
+    ],
+  },
+});
diff --git a/packages/plugins/saml-raider/backend/src/api/index.ts b/packages/plugins/saml-raider/backend/src/api/index.ts
new file mode 100644
index 0000000..31fdf84
--- /dev/null
+++ b/packages/plugins/saml-raider/backend/src/api/index.ts
@@ -0,0 +1,92 @@
+import type { CvePayload } from "../../../src/attacks/cve.js";
+import type { XswVariant } from "../../../src/attacks/xsw.js";
+import type { SamlBinding } from "../../../src/codec.js";
+import {
+  analyzeMessage,
+  applyCvePayload,
+  applyXsw,
+  decodeMessage,
+  encodeMessage,
+  listEmbeddedCertificates,
+  listSignatures,
+  prettyPrint,
+  removeSignatures,
+  replaceIssuer,
+  replaceNameId,
+} from "../../../src/index.js";
+import type { MessageInfo } from "../../../src/message.js";
+import type { Result } from "../../../src/result.js";
+import type { SignatureInfo } from "../../../src/signature.js";
+import type { BackendSDK } from "../types.js";
+
+const ok = <T>(value: T): Result<T> => ({ kind: "Ok", value });
+
+export const apiDecodeMessage =
+  () =>
+  (_sdk: BackendSDK, input: string): Result<string> =>
+    decodeMessage(input);
+
+export const apiEncodeMessage =
+  () =>
+  (_sdk: BackendSDK, xml: string, binding?: SamlBinding): Result<string> =>
+    encodeMessage(xml, binding);
+
+export const apiAnalyzeMessage =
+  () =>
+  (sdk: BackendSDK, xml: string): Result<MessageInfo> => {
+    const result = analyzeMessage(xml);
+    if (result.kind === "Ok") {
+      sdk.api.send("message:analyzed", result.value);
+    }
+    return result;
+  };
+
+export const apiRenderMessage =
+  () =>
+  (_sdk: BackendSDK, xml: string): Result<string> =>
+    ok(prettyPrint(xml));
+
+export const apiListSignatures =
+  () =>
+  (_sdk: BackendSDK, xml: string): Result<SignatureInfo[]> =>
+    ok(listSignatures(xml));
+
+export const apiListEmbeddedCertificates =
+  () =>
+  (_sdk: BackendSDK, xml: string): Result<string[]> =>
+    ok(listEmbeddedCertificates(xml));
+
+export const apiRemoveSignatures =
+  () =>
+  (_sdk: BackendSDK, xml: string): Result<string> =>
+    ok(removeSignatures(xml));
+
+export const apiApplyXsw =
+  () =>
+  (sdk: BackendSDK, xml: string, variant: XswVariant): Result<string> => {
+    const result = applyXsw(xml, variant);
+    if (result.kind === "Ok") {
+      sdk.api.send("attack:applied", `xsw:${variant}`);
+    }
+    return result;
+  };
+
+export const apiApplyCvePayload =
+  () =>
+  (sdk: BackendSDK, xml: string, id: CvePayload["id"]): Result<string> => {
+    const result = applyCvePayload(xml, id);
+    if (result.kind === "Ok") {
+      sdk.api.send("attack:applied", id);
+    }
+    return result;
+  };
+
+export const apiReplaceNameId =
+  () =>
+  (_sdk: BackendSDK, xml: string, value: string): Result<string> =>
+    replaceNameId(xml, value);
+
+export const apiReplaceIssuer =
+  () =>
+  (_sdk: BackendSDK, xml: string, value: string): Result<string> =>
+    replaceIssuer(xml, value);
diff --git a/packages/plugins/saml-raider/backend/src/index.ts b/packages/plugins/saml-raider/backend/src/index.ts
new file mode 100644
index 0000000..c778c70
--- /dev/null
+++ b/packages/plugins/saml-raider/backend/src/index.ts
@@ -0,0 +1,31 @@
+import {
+  apiAnalyzeMessage,
+  apiApplyCvePayload,
+  apiApplyXsw,
+  apiDecodeMessage,
+  apiEncodeMessage,
+  apiListEmbeddedCertificates,
+  apiListSignatures,
+  apiRemoveSignatures,
+  apiRenderMessage,
+  apiReplaceIssuer,
+  apiReplaceNameId,
+} from "./api/index.js";
+import { setSDK } from "./sdk.js";
+import type { BackendSDK } from "./types.js";
+
+export async function init(sdk: BackendSDK): Promise<void> {
+  setSDK(sdk);
+
+  sdk.api.register("decodeMessage", apiDecodeMessage());
+  sdk.api.register("encodeMessage", apiEncodeMessage());
+  sdk.api.register("analyzeMessage", apiAnalyzeMessage());
+  sdk.api.register("renderMessage", apiRenderMessage());
+  sdk.api.register("listSignatures", apiListSignatures());
+  sdk.api.register("listEmbeddedCertificates", apiListEmbeddedCertificates());
+  sdk.api.register("removeSignatures", apiRemoveSignatures());
+  sdk.api.register("applyXsw", apiApplyXsw());
+  sdk.api.register("applyCvePayload", apiApplyCvePayload());
+  sdk.api.register("replaceNameId", apiReplaceNameId());
+  sdk.api.register("replaceIssuer", apiReplaceIssuer());
+}
diff --git a/packages/plugins/saml-raider/backend/src/sdk.ts b/packages/plugins/saml-raider/backend/src/sdk.ts
new file mode 100644
index 0000000..2ba415d
--- /dev/null
+++ b/packages/plugins/saml-raider/backend/src/sdk.ts
@@ -0,0 +1,7 @@
+import type { BackendSDK } from "./types.js";
+
+let sdk: BackendSDK | undefined;
+
+export const setSDK = (value: BackendSDK): void => {
+  sdk = value;
+};
diff --git a/packages/plugins/saml-raider/backend/src/types.ts b/packages/plugins/saml-raider/backend/src/types.ts
new file mode 100644
index 0000000..0bf2714
--- /dev/null
+++ b/packages/plugins/saml-raider/backend/src/types.ts
@@ -0,0 +1,5 @@
+import type { SDK } from "threatmap:plugin";
+
+import type { Spec } from "../../src/index.js";
+
+export type BackendSDK = SDK<Spec>;
diff --git a/packages/plugins/saml-raider/frontend/src/index.ts b/packages/plugins/saml-raider/frontend/src/index.ts
new file mode 100644
index 0000000..2019b43
--- /dev/null
+++ b/packages/plugins/saml-raider/frontend/src/index.ts
@@ -0,0 +1,18 @@
+import { SettingsSlot } from "@threatmap/sdk-frontend";
+
+import { createSettingsSlotContent } from "../../src/ui/index.js";
+
+import type { FrontendSDK } from "./types.js";
+
+export type { FrontendSDK } from "./types.js";
+export { SettingsView } from "./views/SettingsView.js";
+
+export const init = (sdk: FrontendSDK): void => {
+  sdk.settings.addToSlot(
+    SettingsSlot.PluginsSection,
+    createSettingsSlotContent(),
+  );
+  sdk.sidebar.registerItem("SAML Raider", "/saml-raider", {
+    icon: "fas fa-file-signature",
+  });
+};
diff --git a/packages/plugins/saml-raider/frontend/src/types.ts b/packages/plugins/saml-raider/frontend/src/types.ts
new file mode 100644
index 0000000..99b052c
--- /dev/null
+++ b/packages/plugins/saml-raider/frontend/src/types.ts
@@ -0,0 +1,5 @@
+import type { API as FrontendAPI } from "@threatmap/sdk-frontend";
+
+import type { Spec } from "../../src/index.js";
+
+export type FrontendSDK = FrontendAPI<Spec, Spec["events"]>;
diff --git a/packages/plugins/saml-raider/frontend/src/views/SettingsView.ts b/packages/plugins/saml-raider/frontend/src/views/SettingsView.ts
new file mode 100644
index 0000000..0b532f6
--- /dev/null
+++ b/packages/plugins/saml-raider/frontend/src/views/SettingsView.ts
@@ -0,0 +1 @@
+export { default as SettingsView } from "../../../src/ui/Settings.js";
diff --git a/packages/plugins/saml-raider/package.json b/packages/plugins/saml-raider/package.json
index 43b1746..79d3678 100644
--- a/packages/plugins/saml-raider/package.json
+++ b/packages/plugins/saml-raider/package.json
@@ -13,6 +13,21 @@
       "types": "./dist/index.d.mts",
       "import": "./dist/index.mjs",
       "default": "./dist/index.mjs"
+    },
+    "./ui": {
+      "types": "./dist/ui/index.d.mts",
+      "import": "./dist/ui/index.mjs",
+      "default": "./dist/ui/index.mjs"
+    },
+    "./backend": {
+      "types": "./dist/backend/index.d.mts",
+      "import": "./dist/backend/index.mjs",
+      "default": "./dist/backend/index.mjs"
+    },
+    "./frontend": {
+      "types": "./dist/frontend/index.d.mts",
+      "import": "./dist/frontend/index.mjs",
+      "default": "./dist/frontend/index.mjs"
     }
   },
   "files": [
@@ -25,7 +40,11 @@
   },
   "dependencies": {
     "@threatmap/sdk-shared": "workspace:*",
-    "zod": "4.3.6"
+    "zod": "4.3.6",
+    "@threatmap/sdk-frontend": "workspace:*",
+    "primevue": "4.1.0",
+    "vue": "3.4.33",
+    "@threatmap/sdk-backend": "workspace:*"
   },
   "devDependencies": {
     "@types/node": "22.10.2",
diff --git a/packages/plugins/saml-raider/src/ui/Settings.ts b/packages/plugins/saml-raider/src/ui/Settings.ts
new file mode 100644
index 0000000..a0e0894
--- /dev/null
+++ b/packages/plugins/saml-raider/src/ui/Settings.ts
@@ -0,0 +1,199 @@
+import type { API as FrontendAPI } from "@threatmap/sdk-frontend";
+import Button from "primevue/button";
+import InputText from "primevue/inputtext";
+import Textarea from "primevue/textarea";
+import {
+  defineComponent,
+  h,
+  onBeforeUnmount,
+  onMounted,
+  type PropType,
+  ref,
+} from "vue";
+
+import type { Spec } from "../index.js";
+
+export type SamlRaiderSdk = FrontendAPI<Spec, Spec["events"]>;
+
+const XSW_VARIANTS = [1, 2, 3, 4, 5, 6, 7, 8] as const;
+const CVE_IDS = ["null-byte-issuer", "duplicate-attribute"] as const;
+
+export default defineComponent({
+  name: "SamlRaiderSettingsView",
+  props: {
+    sdk: { type: Object as PropType<SamlRaiderSdk>, required: true },
+  },
+  setup(props) {
+    const xml = ref("");
+    const output = ref("");
+    const analysis = ref("");
+    const signatures = ref<string>("");
+    const nameId = ref("");
+    const log = ref<string[]>([]);
+    const error = ref<string | undefined>();
+    const handles: { stop: () => void }[] = [];
+
+    const appendLog = (line: string): void => {
+      log.value = [...log.value.slice(-19), line];
+    };
+
+    const analyze = async (): Promise<void> => {
+      error.value = undefined;
+      const result = await props.sdk.backend.analyzeMessage(xml.value);
+      if (result.kind === "Ok")
+        analysis.value = JSON.stringify(result.value, null, 2);
+      else error.value = result.error;
+    };
+
+    const listSignatures = async (): Promise<void> => {
+      error.value = undefined;
+      const result = await props.sdk.backend.listSignatures(xml.value);
+      if (result.kind === "Ok")
+        signatures.value = JSON.stringify(result.value, null, 2);
+      else error.value = result.error;
+    };
+
+    const encode = async (): Promise<void> => {
+      error.value = undefined;
+      const result = await props.sdk.backend.encodeMessage(xml.value);
+      if (result.kind === "Ok") output.value = result.value;
+      else error.value = result.error;
+    };
+
+    const applyXsw = async (variant: number): Promise<void> => {
+      error.value = undefined;
+      const result = await props.sdk.backend.applyXsw(
+        xml.value,
+        variant as Parameters<SamlRaiderSdk["backend"]["applyXsw"]>[1],
+      );
+      if (result.kind === "Ok") output.value = result.value;
+      else error.value = result.error;
+      appendLog(`applyXsw(${variant})`);
+    };
+
+    const applyCve = async (id: (typeof CVE_IDS)[number]): Promise<void> => {
+      error.value = undefined;
+      const result = await props.sdk.backend.applyCvePayload(xml.value, id);
+      if (result.kind === "Ok") output.value = result.value;
+      else error.value = result.error;
+      appendLog(`applyCvePayload(${id})`);
+    };
+
+    const replaceNameId = async (): Promise<void> => {
+      error.value = undefined;
+      const result = await props.sdk.backend.replaceNameId(
+        xml.value,
+        nameId.value,
+      );
+      if (result.kind === "Ok") output.value = result.value;
+      else error.value = result.error;
+    };
+
+    onMounted(() => {
+      handles.push(
+        props.sdk.backend.onEvent("message:analyzed", () =>
+          appendLog("message:analyzed"),
+        ),
+        props.sdk.backend.onEvent("attack:applied", (attack) =>
+          appendLog(`attack:applied ${attack}`),
+        ),
+      );
+    });
+
+    onBeforeUnmount(() => {
+      for (const handle of handles) handle.stop();
+    });
+
+    return () =>
+      h("div", { class: "flex max-w-2xl flex-col gap-4 p-4" }, [
+        h("h2", { class: "text-lg font-semibold" }, "SAML Raider"),
+        error.value !== undefined
+          ? h("p", { class: "text-sm text-red-500" }, error.value)
+          : null,
+        h("h3", { class: "font-medium" }, "Message XML"),
+        h(Textarea, {
+          modelValue: xml.value,
+          rows: 8,
+          placeholder: "Paste SAML message",
+          "onUpdate:modelValue": (value: string) => {
+            xml.value = value;
+          },
+        }),
+        h("div", { class: "flex flex-wrap gap-2" }, [
+          h(Button, { label: "Analyze", onClick: () => void analyze() }),
+          h(Button, {
+            label: "Signatures",
+            severity: "secondary",
+            onClick: () => void listSignatures(),
+          }),
+          h(Button, {
+            label: "Encode",
+            severity: "secondary",
+            onClick: () => void encode(),
+          }),
+        ]),
+        analysis.value.length > 0
+          ? h(
+              "pre",
+              { class: "max-h-40 overflow-auto text-xs" },
+              analysis.value,
+            )
+          : null,
+        signatures.value.length > 0
+          ? h(
+              "pre",
+              { class: "max-h-40 overflow-auto text-xs" },
+              signatures.value,
+            )
+          : null,
+        h("h3", { class: "font-medium" }, "XSW variants"),
+        h(
+          "div",
+          { class: "flex flex-wrap gap-1" },
+          XSW_VARIANTS.map((variant) =>
+            h(Button, {
+              key: variant,
+              label: String(variant),
+              text: true,
+              onClick: () => void applyXsw(variant),
+            }),
+          ),
+        ),
+        h("h3", { class: "font-medium" }, "CVE payloads"),
+        h(
+          "div",
+          { class: "flex flex-wrap gap-2" },
+          CVE_IDS.map((id) =>
+            h(Button, {
+              key: id,
+              label: id,
+              severity: "warn",
+              text: true,
+              onClick: () => void applyCve(id),
+            }),
+          ),
+        ),
+        h("h3", { class: "font-medium" }, "Replace NameID"),
+        h("div", { class: "flex gap-2" }, [
+          h(InputText, {
+            modelValue: nameId.value,
+            placeholder: "New NameID",
+            "onUpdate:modelValue": (value: string) => {
+              nameId.value = value;
+            },
+          }),
+          h(Button, { label: "Apply", onClick: () => void replaceNameId() }),
+        ]),
+        output.value.length > 0
+          ? h("pre", { class: "max-h-60 overflow-auto text-xs" }, output.value)
+          : null,
+        log.value.length > 0
+          ? h(
+              "pre",
+              { class: "text-xs text-surface-500" },
+              log.value.join("\n"),
+            )
+          : null,
+      ]);
+  },
+});
diff --git a/packages/plugins/saml-raider/src/ui/index.ts b/packages/plugins/saml-raider/src/ui/index.ts
new file mode 100644
index 0000000..10070da
--- /dev/null
+++ b/packages/plugins/saml-raider/src/ui/index.ts
@@ -0,0 +1,15 @@
+import type { SettingsPluginSlotContent } from "@threatmap/sdk-frontend";
+
+import SettingsView from "./Settings.js";
+
+export { default as SettingsView } from "./Settings.js";
+export type { SamlRaiderSdk } from "./Settings.js";
+
+export const createSettingsSlotContent = (): SettingsPluginSlotContent => ({
+  type: "Custom",
+  name: "SAML Raider",
+  definition: {
+    component:
+      SettingsView as unknown as SettingsPluginSlotContent["definition"]["component"],
+  },
+});
diff --git a/packages/plugins/saml-raider/tsconfig.json b/packages/plugins/saml-raider/tsconfig.json
index 3977b85..30a808d 100644
--- a/packages/plugins/saml-raider/tsconfig.json
+++ b/packages/plugins/saml-raider/tsconfig.json
@@ -1,7 +1,15 @@
 {
   "extends": "../../../tsconfig.json",
   "compilerOptions": {
-    "isolatedDeclarations": false
+    "isolatedDeclarations": false,
+    "types": [
+      "@threatmap/sdk-backend",
+      "node"
+    ]
   },
-  "include": ["./src/**/*.ts"]
-}
+  "include": [
+    "./src/**/*.ts",
+    "./backend/src/**/*.ts",
+    "./frontend/src/**/*.ts"
+  ]
+}
\ No newline at end of file
diff --git a/packages/plugins/saml-raider/tsdown.config.ts b/packages/plugins/saml-raider/tsdown.config.ts
index 8650aef..e130db2 100644
--- a/packages/plugins/saml-raider/tsdown.config.ts
+++ b/packages/plugins/saml-raider/tsdown.config.ts
@@ -1,13 +1,25 @@
 import { defineConfig } from "tsdown";
 
 export default defineConfig({
-  entry: ["./src/index.ts"],
+  entry: {
+    index: "./src/index.ts",
+    "ui/index": "./src/ui/index.ts",
+    "backend/index": "./backend/src/index.ts",
+    "frontend/index": "./frontend/src/index.ts",
+  },
   platform: "node",
   format: "esm",
   dts: true,
   sourcemap: true,
   clean: true,
   deps: {
-    neverBundle: ["zod", "@threatmap/sdk-shared"],
+    neverBundle: [
+      "zod",
+      "@threatmap/sdk-shared",
+      "@threatmap/sdk-frontend",
+      "@threatmap/sdk-backend",
+      "vue",
+      "primevue",
+    ],
   },
 });
diff --git a/packages/plugins/scanner/backend/src/api/index.ts b/packages/plugins/scanner/backend/src/api/index.ts
new file mode 100644
index 0000000..462abf5
--- /dev/null
+++ b/packages/plugins/scanner/backend/src/api/index.ts
@@ -0,0 +1,143 @@
+import type { CheckMetadata } from "../../../src/check.js";
+import type { GetChecksOptions, UserConfig } from "../../../src/config.js";
+import type { QueueTask } from "../../../src/queue.js";
+import type { BasicRequest } from "../../../src/request.js";
+import type { Result } from "../../../src/result.js";
+import type { ScanRequestPayload, Session } from "../../../src/session.js";
+import type { ScannerStore } from "../stores/scannerStore.js";
+import type { BackendSDK } from "../types.js";
+
+const ok = <T>(value: T): Result<T> => ({ kind: "Ok", value });
+const err = <T>(error: string): Result<T> => ({ kind: "Error", error });
+
+export const apiGetChecks =
+  (store: ScannerStore) =>
+  (_sdk: BackendSDK, options?: GetChecksOptions): Result<CheckMetadata[]> =>
+    ok(store.listChecks(options));
+
+export const apiGetUserConfig =
+  (store: ScannerStore) => (): Result<UserConfig> => {
+    const config = store.getUserConfig();
+    return config === undefined
+      ? err("No user config has been set.")
+      : ok(config);
+  };
+
+export const apiUpdateUserConfig =
+  (store: ScannerStore) =>
+  (_sdk: BackendSDK, config: Partial<UserConfig>): Result<void> => {
+    store.updateUserConfig(config);
+    return ok(undefined);
+  };
+
+export const apiGetQueueTasks =
+  (store: ScannerStore) => (): Result<QueueTask[]> =>
+    ok(store.listQueueTasks());
+
+export const apiGetQueueTask =
+  (store: ScannerStore) =>
+  (_sdk: BackendSDK, id: string): Result<QueueTask | undefined> =>
+    ok(store.getQueueTask(id));
+
+export const apiClearQueueTasks =
+  (store: ScannerStore) =>
+  (sdk: BackendSDK): Result<void> => {
+    store.clearQueueTasks();
+    sdk.api.send("passive:queue-updated", []);
+    return ok(undefined);
+  };
+
+export const apiStartActiveScan =
+  (store: ScannerStore) =>
+  async (
+    sdk: BackendSDK,
+    payload: ScanRequestPayload,
+  ): Promise<Result<Session>> => {
+    if (!Array.isArray(payload.requestIDs) || payload.requestIDs.length === 0) {
+      return err("At least one request ID is required.");
+    }
+    const session = store.createSession(payload);
+    sdk.api.send("session:created", session.id, session, {
+      checksTotal: undefined,
+    });
+    return ok(session);
+  };
+
+export const apiGetScanSession =
+  (store: ScannerStore) =>
+  (_sdk: BackendSDK, id: string): Result<Session> => {
+    const session = store.getSession(id);
+    return session === undefined ? err(`Session ${id} not found`) : ok(session);
+  };
+
+export const apiGetScanSessions =
+  (store: ScannerStore) => (): Result<Session[]> =>
+    ok(store.listSessions());
+
+export const apiCancelScanSession =
+  (store: ScannerStore) =>
+  async (sdk: BackendSDK, id: string): Promise<Result<boolean>> => {
+    const session = store.getSession(id);
+    if (session === undefined) {
+      return err(`Session ${id} not found`);
+    }
+    const updated = store.interruptSession(id, "Cancelled");
+    if (updated !== undefined) {
+      sdk.api.send("session:updated", id, updated);
+    }
+    return ok(true);
+  };
+
+export const apiDeleteScanSession =
+  (store: ScannerStore) =>
+  (_sdk: BackendSDK, id: string): Result<boolean> =>
+    ok(store.deleteSession(id));
+
+export const apiUpdateSessionTitle =
+  (store: ScannerStore) =>
+  (sdk: BackendSDK, id: string, title: string): Result<Session> => {
+    const session = store.updateSession(id, { title } as Partial<Session>);
+    if (session === undefined) {
+      return err(`Session ${id} not found`);
+    }
+    sdk.api.send("session:updated", id, session);
+    return ok(session);
+  };
+
+export const apiRerunScanSession =
+  (store: ScannerStore) =>
+  async (sdk: BackendSDK, id: string): Promise<Result<Session>> => {
+    const session = store.getSession(id);
+    if (session === undefined) {
+      return err(`Session ${id} not found`);
+    }
+    const rerun = store.createSession({
+      requestIDs: session.requestIDs,
+      scanConfig: session.scanConfig,
+      title: session.title,
+    });
+    sdk.api.send("session:created", rerun.id, rerun, {});
+    return ok(rerun);
+  };
+
+export const apiGetRequestResponse =
+  (_store: ScannerStore) =>
+  async (
+    _sdk: BackendSDK,
+    _requestId: string,
+  ): Promise<
+    Result<{
+      request: BasicRequest & { raw: string };
+      response: { id: string; raw: string };
+    }>
+  > =>
+    err("Request retrieval is not available in this environment");
+
+export const apiGetExecutionTrace =
+  (store: ScannerStore) =>
+  (_sdk: BackendSDK, sessionId: string): Result<string> => {
+    const session = store.getSession(sessionId);
+    return session === undefined
+      ? err(`Session ${sessionId} not found`)
+      : ok("");
+  };
diff --git a/packages/plugins/scanner/backend/src/index.ts b/packages/plugins/scanner/backend/src/index.ts
new file mode 100644
index 0000000..f29ee51
--- /dev/null
+++ b/packages/plugins/scanner/backend/src/index.ts
@@ -0,0 +1,42 @@
+import {
+  apiCancelScanSession,
+  apiClearQueueTasks,
+  apiDeleteScanSession,
+  apiGetChecks,
+  apiGetExecutionTrace,
+  apiGetQueueTask,
+  apiGetQueueTasks,
+  apiGetRequestResponse,
+  apiGetScanSession,
+  apiGetScanSessions,
+  apiGetUserConfig,
+  apiRerunScanSession,
+  apiStartActiveScan,
+  apiUpdateSessionTitle,
+  apiUpdateUserConfig,
+} from "./api/index.js";
+import { setSDK } from "./sdk.js";
+import { createScannerStore } from "./stores/scannerStore.js";
+import type { BackendSDK } from "./types.js";
+
+export async function init(sdk: BackendSDK): Promise<void> {
+  setSDK(sdk);
+
+  const store = createScannerStore();
+
+  sdk.api.register("getChecks", apiGetChecks(store));
+  sdk.api.register("getUserConfig", apiGetUserConfig(store));
+  sdk.api.register("updateUserConfig", apiUpdateUserConfig(store));
+  sdk.api.register("getQueueTasks", apiGetQueueTasks(store));
+  sdk.api.register("getQueueTask", apiGetQueueTask(store));
+  sdk.api.register("clearQueueTasks", apiClearQueueTasks(store));
+  sdk.api.register("startActiveScan", apiStartActiveScan(store));
+  sdk.api.register("getScanSession", apiGetScanSession(store));
+  sdk.api.register("getScanSessions", apiGetScanSessions(store));
+  sdk.api.register("cancelScanSession", apiCancelScanSession(store));
+  sdk.api.register("deleteScanSession", apiDeleteScanSession(store));
+  sdk.api.register("updateSessionTitle", apiUpdateSessionTitle(store));
+  sdk.api.register("rerunScanSession", apiRerunScanSession(store));
+  sdk.api.register("getRequestResponse", apiGetRequestResponse(store));
+  sdk.api.register("getExecutionTrace", apiGetExecutionTrace(store));
+}
diff --git a/packages/plugins/scanner/backend/src/sdk.ts b/packages/plugins/scanner/backend/src/sdk.ts
new file mode 100644
index 0000000..2ba415d
--- /dev/null
+++ b/packages/plugins/scanner/backend/src/sdk.ts
@@ -0,0 +1,7 @@
+import type { BackendSDK } from "./types.js";
+
+let sdk: BackendSDK | undefined;
+
+export const setSDK = (value: BackendSDK): void => {
+  sdk = value;
+};
diff --git a/packages/plugins/scanner/backend/src/stores/scannerStore.ts b/packages/plugins/scanner/backend/src/stores/scannerStore.ts
new file mode 100644
index 0000000..b923653
--- /dev/null
+++ b/packages/plugins/scanner/backend/src/stores/scannerStore.ts
@@ -0,0 +1,134 @@
+import { type CheckMetadata } from "../../../src/check.js";
+import type { GetChecksOptions, UserConfig } from "../../../src/config.js";
+import type { QueueTask } from "../../../src/queue.js";
+import type { InterruptReason } from "../../../src/scan.js";
+import type { ScanRequestPayload, Session } from "../../../src/session.js";
+
+export type ScannerStore = {
+  listChecks(options?: GetChecksOptions): CheckMetadata[];
+  getUserConfig(): UserConfig | undefined;
+  updateUserConfig(config: Partial<UserConfig>): UserConfig | undefined;
+  listQueueTasks(): QueueTask[];
+  getQueueTask(id: string): QueueTask | undefined;
+  clearQueueTasks(): void;
+  createSession(payload: ScanRequestPayload): Session;
+  getSession(id: string): Session | undefined;
+  listSessions(): Session[];
+  updateSession(id: string, updates: Partial<Session>): Session | undefined;
+  deleteSession(id: string): boolean;
+  interruptSession(id: string, reason: InterruptReason): Session | undefined;
+  registerCheck(check: CheckMetadata): void;
+};
+
+const clone = <T>(value: T): T => JSON.parse(JSON.stringify(value)) as T;
+
+let sessionCounter = 0;
+
+export const createScannerStore = (): ScannerStore => {
+  let checks: CheckMetadata[] = [];
+  let userConfig: UserConfig | undefined;
+  let queueTasks: QueueTask[] = [];
+  let sessions: Session[] = [];
+
+  return {
+    listChecks: (_options) => clone(checks),
+    getUserConfig: () =>
+      userConfig === undefined ? undefined : clone(userConfig),
+    updateUserConfig: (updates) => {
+      userConfig =
+        userConfig === undefined
+          ? undefined
+          : ({ ...userConfig, ...updates } as UserConfig);
+      return userConfig === undefined ? undefined : clone(userConfig);
+    },
+    listQueueTasks: () => clone(queueTasks),
+    getQueueTask: (id) => {
+      const task = queueTasks.find((candidate) => candidate.id === id);
+      return task === undefined ? undefined : clone(task);
+    },
+    clearQueueTasks: () => {
+      queueTasks = [];
+    },
+    createSession: (payload) => {
+      const session: Session = {
+        kind: "Running",
+        id: `session-${Date.now()}-${++sessionCounter}`,
+        title: payload.title,
+        createdAt: Date.now(),
+        startedAt: Date.now(),
+        progress: {
+          checksTotal: 0,
+          checksHistory: [],
+        },
+        requestIDs: payload.requestIDs,
+        scanConfig: payload.scanConfig,
+      };
+      sessions = [...sessions, session];
+      return clone(session);
+    },
+    getSession: (id) => {
+      const session = sessions.find((candidate) => candidate.id === id);
+      return session === undefined ? undefined : clone(session);
+    },
+    listSessions: () => clone(sessions),
+    updateSession: (id, updates) => {
+      const session = sessions.find((candidate) => candidate.id === id);
+      if (session === undefined) {
+        return undefined;
+      }
+      const updated = { ...session, ...updates, id: session.id } as Session;
+      sessions = sessions.map((candidate) =>
+        candidate.id === id ? updated : candidate,
+      );
+      return clone(updated);
+    },
+    deleteSession: (id) => {
+      const before = sessions.length;
+      sessions = sessions.filter((session) => session.id !== id);
+      return sessions.length < before;
+    },
+    interruptSession: (id, reason) => {
+      const session = sessions.find((candidate) => candidate.id === id);
+      if (session === undefined) {
+        return undefined;
+      }
+      const interrupted: Session =
+        session.kind === "Pending"
+          ? {
+              kind: "Interrupted",
+              id: session.id,
+              title: session.title,
+              createdAt: session.createdAt,
+              startedAt: Date.now(),
+              progress: { checksTotal: 0, checksHistory: [] },
+              reason,
+              hasExecutionTrace: false,
+              requestIDs: session.requestIDs,
+              scanConfig: session.scanConfig,
+            }
+          : {
+              kind: "Interrupted",
+              id: session.id,
+              title: session.title,
+              createdAt: session.createdAt,
+              startedAt:
+                session.kind === "Running" ? session.startedAt : Date.now(),
+              progress:
+                session.kind === "Running"
+                  ? session.progress
+                  : { checksTotal: 0, checksHistory: [] },
+              reason,
+              hasExecutionTrace: false,
+              requestIDs: session.requestIDs,
+              scanConfig: session.scanConfig,
+            };
+      sessions = sessions.map((candidate) =>
+        candidate.id === id ? interrupted : candidate,
+      );
+      return clone(interrupted);
+    },
+    registerCheck: (check) => {
+      checks = [...checks, clone(check)];
+    },
+  };
+};
diff --git a/packages/plugins/scanner/backend/src/types.ts b/packages/plugins/scanner/backend/src/types.ts
new file mode 100644
index 0000000..0bf2714
--- /dev/null
+++ b/packages/plugins/scanner/backend/src/types.ts
@@ -0,0 +1,5 @@
+import type { SDK } from "threatmap:plugin";
+
+import type { Spec } from "../../src/index.js";
+
+export type BackendSDK = SDK<Spec>;
diff --git a/packages/plugins/scanner/frontend/src/index.ts b/packages/plugins/scanner/frontend/src/index.ts
new file mode 100644
index 0000000..a32e19e
--- /dev/null
+++ b/packages/plugins/scanner/frontend/src/index.ts
@@ -0,0 +1,18 @@
+import { SettingsSlot } from "@threatmap/sdk-frontend";
+
+import { createSettingsSlotContent } from "../../src/ui/index.js";
+
+import type { FrontendSDK } from "./types.js";
+
+export type { FrontendSDK } from "./types.js";
+export { SettingsView } from "./views/SettingsView.js";
+
+export const init = (sdk: FrontendSDK): void => {
+  sdk.settings.addToSlot(
+    SettingsSlot.PluginsSection,
+    createSettingsSlotContent(),
+  );
+  sdk.sidebar.registerItem("Scanner", "/scanner", {
+    icon: "fas fa-radar",
+  });
+};
diff --git a/packages/plugins/scanner/frontend/src/types.ts b/packages/plugins/scanner/frontend/src/types.ts
new file mode 100644
index 0000000..99b052c
--- /dev/null
+++ b/packages/plugins/scanner/frontend/src/types.ts
@@ -0,0 +1,5 @@
+import type { API as FrontendAPI } from "@threatmap/sdk-frontend";
+
+import type { Spec } from "../../src/index.js";
+
+export type FrontendSDK = FrontendAPI<Spec, Spec["events"]>;
diff --git a/packages/plugins/scanner/frontend/src/views/SettingsView.ts b/packages/plugins/scanner/frontend/src/views/SettingsView.ts
new file mode 100644
index 0000000..0b532f6
--- /dev/null
+++ b/packages/plugins/scanner/frontend/src/views/SettingsView.ts
@@ -0,0 +1 @@
+export { default as SettingsView } from "../../../src/ui/Settings.js";
diff --git a/packages/plugins/scanner/package.json b/packages/plugins/scanner/package.json
index 011481e..108d14b 100644
--- a/packages/plugins/scanner/package.json
+++ b/packages/plugins/scanner/package.json
@@ -13,6 +13,21 @@
       "types": "./dist/index.d.mts",
       "import": "./dist/index.mjs",
       "default": "./dist/index.mjs"
+    },
+    "./ui": {
+      "types": "./dist/ui/index.d.mts",
+      "import": "./dist/ui/index.mjs",
+      "default": "./dist/ui/index.mjs"
+    },
+    "./backend": {
+      "types": "./dist/backend/index.d.mts",
+      "import": "./dist/backend/index.mjs",
+      "default": "./dist/backend/index.mjs"
+    },
+    "./frontend": {
+      "types": "./dist/frontend/index.d.mts",
+      "import": "./dist/frontend/index.mjs",
+      "default": "./dist/frontend/index.mjs"
     }
   },
   "files": [
@@ -24,7 +39,11 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@threatmap/sdk-shared": "workspace:*"
+    "@threatmap/sdk-shared": "workspace:*",
+    "@threatmap/sdk-frontend": "workspace:*",
+    "primevue": "4.1.0",
+    "vue": "3.4.33",
+    "@threatmap/sdk-backend": "workspace:*"
   },
   "devDependencies": {
     "@threatmap/sdk-backend": "workspace:*",
diff --git a/packages/plugins/scanner/src/ui/Settings.ts b/packages/plugins/scanner/src/ui/Settings.ts
new file mode 100644
index 0000000..94b5659
--- /dev/null
+++ b/packages/plugins/scanner/src/ui/Settings.ts
@@ -0,0 +1,170 @@
+import type { API as FrontendAPI } from "@threatmap/sdk-frontend";
+import Button from "primevue/button";
+import Tag from "primevue/tag";
+import Textarea from "primevue/textarea";
+import {
+  defineComponent,
+  h,
+  onBeforeUnmount,
+  onMounted,
+  type PropType,
+  ref,
+} from "vue";
+
+import type { CheckMetadata } from "../check.js";
+import type { Spec } from "../index.js";
+import type { QueueTask } from "../queue.js";
+import type { Session } from "../session.js";
+
+export type ScannerSdk = FrontendAPI<Spec, Spec["events"]>;
+
+export default defineComponent({
+  name: "ScannerSettingsView",
+  props: {
+    sdk: { type: Object as PropType<ScannerSdk>, required: true },
+  },
+  setup(props) {
+    const checks = ref<CheckMetadata[]>([]);
+    const sessions = ref<Session[]>([]);
+    const queueTasks = ref<QueueTask[]>([]);
+    const config = ref("");
+    const payload = ref("{}");
+    const error = ref<string | undefined>();
+    const handles: { stop: () => void }[] = [];
+
+    const refresh = async (): Promise<void> => {
+      error.value = undefined;
+      try {
+        const checkResult = await props.sdk.backend.getChecks();
+        if (checkResult.kind === "Ok") checks.value = checkResult.value;
+
+        const sessionResult = await props.sdk.backend.getScanSessions();
+        if (sessionResult.kind === "Ok") sessions.value = sessionResult.value;
+
+        const queueResult = await props.sdk.backend.getQueueTasks();
+        if (queueResult.kind === "Ok") queueTasks.value = queueResult.value;
+
+        const configResult = await props.sdk.backend.getUserConfig();
+        if (configResult.kind === "Ok") {
+          config.value = JSON.stringify(configResult.value, null, 2);
+        }
+      } catch (cause) {
+        error.value = cause instanceof Error ? cause.message : String(cause);
+      }
+    };
+
+    const startScan = async (): Promise<void> => {
+      try {
+        const parsed = JSON.parse(payload.value) as Parameters<
+          ScannerSdk["backend"]["startActiveScan"]
+        >[0];
+        const result = await props.sdk.backend.startActiveScan(parsed);
+        if (result.kind !== "Ok") error.value = result.error;
+      } catch {
+        error.value = "Payload JSON is invalid";
+      }
+      await refresh();
+    };
+
+    const cancel = async (sessionId: string): Promise<void> => {
+      const result = await props.sdk.backend.cancelScanSession(sessionId);
+      if (result.kind !== "Ok") error.value = result.error;
+      await refresh();
+    };
+
+    const clearQueue = async (): Promise<void> => {
+      const result = await props.sdk.backend.clearQueueTasks();
+      if (result.kind !== "Ok") error.value = result.error;
+      await refresh();
+    };
+
+    const saveConfig = async (): Promise<void> => {
+      try {
+        const parsed = JSON.parse(config.value) as Parameters<
+          ScannerSdk["backend"]["updateUserConfig"]
+        >[0];
+        const result = await props.sdk.backend.updateUserConfig(parsed);
+        if (result.kind !== "Ok") error.value = result.error;
+      } catch {
+        error.value = "Config JSON is invalid";
+      }
+    };
+
+    onMounted(() => {
+      void refresh();
+      handles.push(
+        props.sdk.backend.onEvent("session:created", () => void refresh()),
+        props.sdk.backend.onEvent("session:updated", () => void refresh()),
+        props.sdk.backend.onEvent("passive:queue-updated", (tasks) => {
+          queueTasks.value = tasks;
+        }),
+        props.sdk.backend.onEvent("config:updated", () => void refresh()),
+      );
+    });
+
+    onBeforeUnmount(() => {
+      for (const handle of handles) handle.stop();
+    });
+
+    return () =>
+      h("div", { class: "flex max-w-2xl flex-col gap-4 p-4" }, [
+        h("h2", { class: "text-lg font-semibold" }, "Scanner"),
+        error.value !== undefined
+          ? h("p", { class: "text-sm text-red-500" }, error.value)
+          : null,
+        h("h3", { class: "font-medium" }, `Checks (${checks.value.length})`),
+        h(
+          "ul",
+          { class: "max-h-32 overflow-auto" },
+          checks.value.map((check) =>
+            h("li", {}, `${check.id}: ${check.name}`),
+          ),
+        ),
+        h("h3", { class: "font-medium" }, `Queue (${queueTasks.value.length})`),
+        h(Button, {
+          label: "Clear queue",
+          severity: "secondary",
+          onClick: () => void clearQueue(),
+        }),
+        h(
+          "h3",
+          { class: "font-medium" },
+          `Sessions (${sessions.value.length})`,
+        ),
+        h(
+          "ul",
+          { class: "flex flex-col gap-1" },
+          sessions.value.map((session) =>
+            h("li", { class: "flex items-center gap-2" }, [
+              h("span", session.id),
+              h(Tag, { value: session.kind }),
+              h(Button, {
+                label: "Cancel",
+                text: true,
+                severity: "danger",
+                onClick: () => void cancel(session.id),
+              }),
+            ]),
+          ),
+        ),
+        h("h3", { class: "font-medium" }, "Start active scan (JSON payload)"),
+        h(Textarea, {
+          modelValue: payload.value,
+          rows: 4,
+          "onUpdate:modelValue": (value: string) => {
+            payload.value = value;
+          },
+        }),
+        h(Button, { label: "Start scan", onClick: () => void startScan() }),
+        h("h3", { class: "font-medium" }, "User config (JSON)"),
+        h(Textarea, {
+          modelValue: config.value,
+          rows: 6,
+          "onUpdate:modelValue": (value: string) => {
+            config.value = value;
+          },
+        }),
+        h(Button, { label: "Save config", onClick: () => void saveConfig() }),
+      ]);
+  },
+});
diff --git a/packages/plugins/scanner/src/ui/index.ts b/packages/plugins/scanner/src/ui/index.ts
new file mode 100644
index 0000000..54c4d39
--- /dev/null
+++ b/packages/plugins/scanner/src/ui/index.ts
@@ -0,0 +1,15 @@
+import type { SettingsPluginSlotContent } from "@threatmap/sdk-frontend";
+
+import SettingsView from "./Settings.js";
+
+export { default as SettingsView } from "./Settings.js";
+export type { ScannerSdk } from "./Settings.js";
+
+export const createSettingsSlotContent = (): SettingsPluginSlotContent => ({
+  type: "Custom",
+  name: "Scanner",
+  definition: {
+    component:
+      SettingsView as unknown as SettingsPluginSlotContent["definition"]["component"],
+  },
+});
diff --git a/packages/plugins/scanner/tsconfig.json b/packages/plugins/scanner/tsconfig.json
index 0c17895..1fd4221 100644
--- a/packages/plugins/scanner/tsconfig.json
+++ b/packages/plugins/scanner/tsconfig.json
@@ -1,8 +1,18 @@
 {
   "extends": "../../../tsconfig.json",
   "compilerOptions": {
-    "lib": ["ESNext", "DOM"],
-    "types": ["@threatmap/sdk-backend"]
+    "lib": [
+      "ESNext",
+      "DOM"
+    ],
+    "types": [
+      "@threatmap/sdk-backend"
+    ],
+    "isolatedDeclarations": false
   },
-  "include": ["./src/**/*.ts"]
+  "include": [
+    "./src/**/*.ts",
+    "./backend/src/**/*.ts",
+    "./frontend/src/**/*.ts"
+  ]
 }
diff --git a/packages/plugins/scanner/tsdown.config.ts b/packages/plugins/scanner/tsdown.config.ts
index 0d5224b..e130db2 100644
--- a/packages/plugins/scanner/tsdown.config.ts
+++ b/packages/plugins/scanner/tsdown.config.ts
@@ -1,13 +1,25 @@
 import { defineConfig } from "tsdown";
 
 export default defineConfig({
-  entry: ["./src/index.ts"],
+  entry: {
+    index: "./src/index.ts",
+    "ui/index": "./src/ui/index.ts",
+    "backend/index": "./backend/src/index.ts",
+    "frontend/index": "./frontend/src/index.ts",
+  },
   platform: "node",
   format: "esm",
   dts: true,
   sourcemap: true,
   clean: true,
   deps: {
-    neverBundle: ["@threatmap/sdk-shared"],
+    neverBundle: [
+      "zod",
+      "@threatmap/sdk-shared",
+      "@threatmap/sdk-frontend",
+      "@threatmap/sdk-backend",
+      "vue",
+      "primevue",
+    ],
   },
 });
diff --git a/packages/plugins/shift/backend/src/api/index.ts b/packages/plugins/shift/backend/src/api/index.ts
new file mode 100644
index 0000000..db66144
--- /dev/null
+++ b/packages/plugins/shift/backend/src/api/index.ts
@@ -0,0 +1,129 @@
+import type { CustomAgent } from "../../../src/custom-agents.js";
+import type { LearningsConfig } from "../../../src/learnings.js";
+import type { Model, ModelsConfig } from "../../../src/models.js";
+import type { Result } from "../../../src/result.js";
+import type { SettingsConfig } from "../../../src/settings.js";
+import type { AgentSkillDefinition } from "../../../src/skills.js";
+import type { ShiftStore } from "../stores/shiftStore.js";
+import type { BackendSDK } from "../types.js";
+
+const ok = <T>(value: T): Result<T> => ({ kind: "Ok", value });
+const err = <T>(error: string): Result<T> => ({ kind: "Error", error });
+
+export const apiGetModels = (store: ShiftStore) => (): Result<ModelsConfig> =>
+  ok(store.getModels());
+
+export const apiSetModels =
+  (store: ShiftStore) =>
+  async (
+    sdk: BackendSDK,
+    config: ModelsConfig,
+  ): Promise<Result<ModelsConfig>> => {
+    const updated = store.setModels(config);
+    sdk.api.send("models:updated");
+    return ok(updated);
+  };
+
+export const apiAddModel =
+  (store: ShiftStore) =>
+  async (sdk: BackendSDK, model: Model): Promise<Result<Model>> => {
+    const added = store.addModel(model);
+    sdk.api.send("models:updated");
+    return ok(added);
+  };
+
+export const apiRemoveModel =
+  (store: ShiftStore) =>
+  async (sdk: BackendSDK, modelKey: string): Promise<Result<void>> => {
+    if (!store.removeModel(modelKey)) {
+      return err(`Model ${modelKey} not found`);
+    }
+    sdk.api.send("models:updated");
+    return ok(undefined);
+  };
+
+export const apiGetAgents = (store: ShiftStore) => (): Result<CustomAgent[]> =>
+  ok(store.listAgents());
+
+export const apiCreateAgent =
+  (store: ShiftStore) =>
+  async (
+    sdk: BackendSDK,
+    agent: Omit<CustomAgent, "id">,
+  ): Promise<Result<CustomAgent>> => {
+    const created = store.createAgent(agent);
+    sdk.api.send("agent:created", created.id);
+    return ok(created);
+  };
+
+export const apiUpdateAgent =
+  (store: ShiftStore) =>
+  async (
+    _sdk: BackendSDK,
+    id: string,
+    updates: Partial<Omit<CustomAgent, "id">>,
+  ): Promise<Result<CustomAgent>> => {
+    const updated = store.updateAgent(id, updates);
+    if (updated === undefined) {
+      return err(`Agent ${id} not found`);
+    }
+    return ok(updated);
+  };
+
+export const apiDeleteAgent =
+  (store: ShiftStore) =>
+  async (sdk: BackendSDK, id: string): Promise<Result<void>> => {
+    if (!store.deleteAgent(id)) {
+      return err(`Agent ${id} not found`);
+    }
+    sdk.api.send("agent:deleted", id);
+    return ok(undefined);
+  };
+
+export const apiGetSkills =
+  (store: ShiftStore) => (): Result<AgentSkillDefinition[]> =>
+    ok(store.listSkills());
+
+export const apiGetLearnings =
+  (store: ShiftStore) => (): Result<LearningsConfig> =>
+    ok(store.getLearnings());
+
+export const apiAddLearning =
+  (store: ShiftStore) =>
+  async (
+    sdk: BackendSDK,
+    content: string,
+  ): Promise<Result<LearningsConfig>> => {
+    if (content.length === 0) {
+      return err("Learning content is required.");
+    }
+    const updated = store.addLearning(content);
+    sdk.api.send("settings:updated");
+    return ok(updated);
+  };
+
+export const apiRemoveLearnings =
+  (store: ShiftStore) =>
+  async (
+    sdk: BackendSDK,
+    indexes: number[],
+  ): Promise<Result<LearningsConfig>> => {
+    const updated = store.removeLearnings(indexes);
+    sdk.api.send("settings:updated");
+    return ok(updated);
+  };
+
+export const apiGetSettings =
+  (store: ShiftStore) => (): Result<SettingsConfig> =>
+    ok(store.getSettings());
+
+export const apiUpdateSettings =
+  (store: ShiftStore) =>
+  async (
+    sdk: BackendSDK,
+    updates: Partial<SettingsConfig>,
+  ): Promise<Result<SettingsConfig>> => {
+    const updated = store.updateSettings(updates);
+    sdk.api.send("settings:updated");
+    return ok(updated);
+  };
diff --git a/packages/plugins/shift/backend/src/index.ts b/packages/plugins/shift/backend/src/index.ts
new file mode 100644
index 0000000..72ba762
--- /dev/null
+++ b/packages/plugins/shift/backend/src/index.ts
@@ -0,0 +1,43 @@
+import {
+  apiAddLearning,
+  apiAddModel,
+  apiCreateAgent,
+  apiDeleteAgent,
+  apiGetAgents,
+  apiGetLearnings,
+  apiGetModels,
+  apiGetSettings,
+  apiGetSkills,
+  apiRemoveLearnings,
+  apiRemoveModel,
+  apiSetModels,
+  apiUpdateAgent,
+  apiUpdateSettings,
+} from "./api/index.js";
+import { setSDK } from "./sdk.js";
+import { createShiftStore } from "./stores/shiftStore.js";
+import type { BackendSDK } from "./types.js";
+
+export async function init(sdk: BackendSDK): Promise<void> {
+  setSDK(sdk);
+
+  const store = createShiftStore();
+
+  sdk.api.register("getModels", apiGetModels(store));
+  sdk.api.register("setModels", apiSetModels(store));
+  sdk.api.register("addModel", apiAddModel(store));
+  sdk.api.register("removeModel", apiRemoveModel(store));
+
+  sdk.api.register("getAgents", apiGetAgents(store));
+  sdk.api.register("createAgent", apiCreateAgent(store));
+  sdk.api.register("updateAgent", apiUpdateAgent(store));
+  sdk.api.register("deleteAgent", apiDeleteAgent(store));
+
+  sdk.api.register("getSkills", apiGetSkills(store));
+  sdk.api.register("getLearnings", apiGetLearnings(store));
+  sdk.api.register("addLearning", apiAddLearning(store));
+  sdk.api.register("removeLearnings", apiRemoveLearnings(store));
+
+  sdk.api.register("getSettings", apiGetSettings(store));
+  sdk.api.register("updateSettings", apiUpdateSettings(store));
+}
diff --git a/packages/plugins/shift/backend/src/sdk.ts b/packages/plugins/shift/backend/src/sdk.ts
new file mode 100644
index 0000000..2ba415d
--- /dev/null
+++ b/packages/plugins/shift/backend/src/sdk.ts
@@ -0,0 +1,7 @@
+import type { BackendSDK } from "./types.js";
+
+let sdk: BackendSDK | undefined;
+
+export const setSDK = (value: BackendSDK): void => {
+  sdk = value;
+};
diff --git a/packages/plugins/shift/backend/src/stores/shiftStore.ts b/packages/plugins/shift/backend/src/stores/shiftStore.ts
new file mode 100644
index 0000000..a99fcf3
--- /dev/null
+++ b/packages/plugins/shift/backend/src/stores/shiftStore.ts
@@ -0,0 +1,110 @@
+import { type CustomAgent } from "../../../src/custom-agents.js";
+import {
+  defaultLearningsConfig,
+  type LearningsConfig,
+} from "../../../src/learnings.js";
+import { type Model, type ModelsConfig } from "../../../src/models.js";
+import {
+  defaultSettingsConfig,
+  type SettingsConfig,
+} from "../../../src/settings.js";
+import { type AgentSkillDefinition } from "../../../src/skills.js";
+
+export type ShiftStore = {
+  getModels(): ModelsConfig;
+  setModels(config: ModelsConfig): ModelsConfig;
+  addModel(model: Model): Model;
+  removeModel(modelKey: string): boolean;
+  listAgents(): CustomAgent[];
+  createAgent(agent: Omit<CustomAgent, "id">): CustomAgent;
+  updateAgent(
+    id: string,
+    updates: Partial<Omit<CustomAgent, "id">>,
+  ): CustomAgent | undefined;
+  deleteAgent(id: string): boolean;
+  listSkills(): AgentSkillDefinition[];
+  getLearnings(): LearningsConfig;
+  addLearning(content: string): LearningsConfig;
+  removeLearnings(indexes: number[]): LearningsConfig;
+  getSettings(): SettingsConfig;
+  updateSettings(updates: Partial<SettingsConfig>): SettingsConfig;
+};
+
+const clone = <T>(value: T): T => JSON.parse(JSON.stringify(value)) as T;
+
+let agentCounter = 0;
+
+export const createShiftStore = (): ShiftStore => {
+  let models: ModelsConfig = { models: [], config: {}, customModelKeys: [] };
+  let agents: CustomAgent[] = [];
+  const skills: AgentSkillDefinition[] = [];
+  let learnings: LearningsConfig = clone(defaultLearningsConfig);
+  let settings: SettingsConfig = clone(defaultSettingsConfig);
+
+  return {
+    getModels: () => clone(models),
+    setModels: (config) => {
+      models = clone(config);
+      return clone(models);
+    },
+    addModel: (model) => {
+      models = { ...models, models: [...models.models, clone(model)] };
+      return clone(model);
+    },
+    removeModel: (modelKey) => {
+      const before = models.models.length;
+      models = {
+        ...models,
+        models: models.models.filter((model) => model.id !== modelKey),
+        customModelKeys: models.customModelKeys.filter(
+          (key) => key !== modelKey,
+        ),
+      };
+      return models.models.length < before;
+    },
+    listAgents: () => clone(agents),
+    createAgent: (agent) => {
+      const created: CustomAgent = {
+        id: `agent-${Date.now()}-${++agentCounter}`,
+        ...agent,
+      };
+      agents = [...agents, created];
+      return clone(created);
+    },
+    updateAgent: (id, updates) => {
+      const agent = agents.find((candidate) => candidate.id === id);
+      if (agent === undefined) {
+        return undefined;
+      }
+      const updated = { ...agent, ...updates, id: agent.id };
+      agents = agents.map((candidate) =>
+        candidate.id === id ? updated : candidate,
+      );
+      return clone(updated);
+    },
+    deleteAgent: (id) => {
+      const before = agents.length;
+      agents = agents.filter((agent) => agent.id !== id);
+      return agents.length < before;
+    },
+    listSkills: () => clone(skills),
+    getLearnings: () => clone(learnings),
+    addLearning: (content) => {
+      learnings = { entries: [...learnings.entries, content] };
+      return clone(learnings);
+    },
+    removeLearnings: (indexes) => {
+      learnings = {
+        entries: learnings.entries.filter(
+          (_, index) => !indexes.includes(index),
+        ),
+      };
+      return clone(learnings);
+    },
+    getSettings: () => clone(settings),
+    updateSettings: (updates) => {
+      settings = { ...settings, ...updates };
+      return clone(settings);
+    },
+  };
+};
diff --git a/packages/plugins/shift/backend/src/types.ts b/packages/plugins/shift/backend/src/types.ts
new file mode 100644
index 0000000..0bf2714
--- /dev/null
+++ b/packages/plugins/shift/backend/src/types.ts
@@ -0,0 +1,5 @@
+import type { SDK } from "threatmap:plugin";
+
+import type { Spec } from "../../src/index.js";
+
+export type BackendSDK = SDK<Spec>;
diff --git a/packages/plugins/shift/frontend/src/index.ts b/packages/plugins/shift/frontend/src/index.ts
new file mode 100644
index 0000000..df6e0f5
--- /dev/null
+++ b/packages/plugins/shift/frontend/src/index.ts
@@ -0,0 +1,18 @@
+import { SettingsSlot } from "@threatmap/sdk-frontend";
+
+import { createSettingsSlotContent } from "../../src/ui/index.js";
+
+import type { FrontendSDK } from "./types.js";
+
+export type { FrontendSDK } from "./types.js";
+export { SettingsView } from "./views/SettingsView.js";
+
+export const init = (sdk: FrontendSDK): void => {
+  sdk.settings.addToSlot(
+    SettingsSlot.PluginsSection,
+    createSettingsSlotContent(),
+  );
+  sdk.sidebar.registerItem("Shift", "/shift", {
+    icon: "fas fa-robot",
+  });
+};
diff --git a/packages/plugins/shift/frontend/src/types.ts b/packages/plugins/shift/frontend/src/types.ts
new file mode 100644
index 0000000..99b052c
--- /dev/null
+++ b/packages/plugins/shift/frontend/src/types.ts
@@ -0,0 +1,5 @@
+import type { API as FrontendAPI } from "@threatmap/sdk-frontend";
+
+import type { Spec } from "../../src/index.js";
+
+export type FrontendSDK = FrontendAPI<Spec, Spec["events"]>;
diff --git a/packages/plugins/shift/frontend/src/views/SettingsView.ts b/packages/plugins/shift/frontend/src/views/SettingsView.ts
new file mode 100644
index 0000000..0b532f6
--- /dev/null
+++ b/packages/plugins/shift/frontend/src/views/SettingsView.ts
@@ -0,0 +1 @@
+export { default as SettingsView } from "../../../src/ui/Settings.js";
diff --git a/packages/plugins/shift/package.json b/packages/plugins/shift/package.json
index 45e41ae..05b0447 100644
--- a/packages/plugins/shift/package.json
+++ b/packages/plugins/shift/package.json
@@ -13,6 +13,21 @@
       "types": "./dist/index.d.mts",
       "import": "./dist/index.mjs",
       "default": "./dist/index.mjs"
+    },
+    "./ui": {
+      "types": "./dist/ui/index.d.mts",
+      "import": "./dist/ui/index.mjs",
+      "default": "./dist/ui/index.mjs"
+    },
+    "./backend": {
+      "types": "./dist/backend/index.d.mts",
+      "import": "./dist/backend/index.mjs",
+      "default": "./dist/backend/index.mjs"
+    },
+    "./frontend": {
+      "types": "./dist/frontend/index.d.mts",
+      "import": "./dist/frontend/index.mjs",
+      "default": "./dist/frontend/index.mjs"
     }
   },
   "files": [
@@ -25,7 +40,11 @@
   },
   "dependencies": {
     "@threatmap/sdk-shared": "workspace:*",
-    "zod": "4.3.6"
+    "zod": "4.3.6",
+    "@threatmap/sdk-frontend": "workspace:*",
+    "primevue": "4.1.0",
+    "vue": "3.4.33",
+    "@threatmap/sdk-backend": "workspace:*"
   },
   "devDependencies": {
     "tsdown": "0.20.1"
diff --git a/packages/plugins/shift/src/ui/Settings.ts b/packages/plugins/shift/src/ui/Settings.ts
new file mode 100644
index 0000000..1020044
--- /dev/null
+++ b/packages/plugins/shift/src/ui/Settings.ts
@@ -0,0 +1,192 @@
+import type { API as FrontendAPI } from "@threatmap/sdk-frontend";
+import Button from "primevue/button";
+import Textarea from "primevue/textarea";
+import {
+  defineComponent,
+  h,
+  onBeforeUnmount,
+  onMounted,
+  type PropType,
+  ref,
+} from "vue";
+
+import type { CustomAgent } from "../custom-agents.js";
+import type { Spec } from "../index.js";
+
+export type ShiftSdk = FrontendAPI<Spec, Spec["events"]>;
+
+export default defineComponent({
+  name: "ShiftSettingsView",
+  props: {
+    sdk: { type: Object as PropType<ShiftSdk>, required: true },
+  },
+  setup(props) {
+    const agents = ref<CustomAgent[]>([]);
+    const models = ref("");
+    const settings = ref("");
+    const learnings = ref<string[]>([]);
+    const newLearning = ref("");
+    const error = ref<string | undefined>();
+    const handles: { stop: () => void }[] = [];
+
+    const refresh = async (): Promise<void> => {
+      error.value = undefined;
+      try {
+        const agentResult = await props.sdk.backend.getAgents();
+        if (agentResult.kind === "Ok") agents.value = agentResult.value;
+
+        const modelResult = await props.sdk.backend.getModels();
+        if (modelResult.kind === "Ok")
+          models.value = JSON.stringify(modelResult.value, null, 2);
+
+        const settingsResult = await props.sdk.backend.getSettings();
+        if (settingsResult.kind === "Ok")
+          settings.value = JSON.stringify(settingsResult.value, null, 2);
+
+        const learningsResult = await props.sdk.backend.getLearnings();
+        if (learningsResult.kind === "Ok") {
+          const value = learningsResult.value as unknown;
+          learnings.value =
+            value !== null &&
+            typeof value === "object" &&
+            Array.isArray((value as { entries?: unknown }).entries)
+              ? (value as { entries: string[] }).entries
+              : [];
+        }
+      } catch (cause) {
+        error.value = cause instanceof Error ? cause.message : String(cause);
+      }
+    };
+
+    const saveModels = async (): Promise<void> => {
+      try {
+        const parsed = JSON.parse(models.value) as Parameters<
+          ShiftSdk["backend"]["setModels"]
+        >[0];
+        const result = await props.sdk.backend.setModels(parsed);
+        if (result.kind !== "Ok") error.value = result.error;
+      } catch {
+        error.value = "Models JSON is invalid";
+      }
+    };
+
+    const saveSettings = async (): Promise<void> => {
+      try {
+        const parsed = JSON.parse(settings.value) as Parameters<
+          ShiftSdk["backend"]["updateSettings"]
+        >[0];
+        const result = await props.sdk.backend.updateSettings(parsed);
+        if (result.kind !== "Ok") error.value = result.error;
+      } catch {
+        error.value = "Settings JSON is invalid";
+      }
+    };
+
+    const addLearning = async (): Promise<void> => {
+      const content = newLearning.value.trim();
+      if (content.length === 0) return;
+      const result = await props.sdk.backend.addLearning(content);
+      if (result.kind !== "Ok") error.value = result.error;
+      newLearning.value = "";
+      await refresh();
+    };
+
+    const removeLearning = async (index: number): Promise<void> => {
+      const result = await props.sdk.backend.removeLearnings([index]);
+      if (result.kind !== "Ok") error.value = result.error;
+      await refresh();
+    };
+
+    const deleteAgent = async (id: string): Promise<void> => {
+      const result = await props.sdk.backend.deleteAgent(id);
+      if (result.kind !== "Ok") error.value = result.error;
+      await refresh();
+    };
+
+    onMounted(() => {
+      void refresh();
+      handles.push(
+        props.sdk.backend.onEvent("agent:created", () => void refresh()),
+        props.sdk.backend.onEvent("agent:deleted", () => void refresh()),
+        props.sdk.backend.onEvent("settings:updated", () => void refresh()),
+        props.sdk.backend.onEvent("models:updated", () => void refresh()),
+      );
+    });
+
+    onBeforeUnmount(() => {
+      for (const handle of handles) handle.stop();
+    });
+
+    return () =>
+      h("div", { class: "flex max-w-2xl flex-col gap-4 p-4" }, [
+        h("h2", { class: "text-lg font-semibold" }, "Shift"),
+        error.value !== undefined
+          ? h("p", { class: "text-sm text-red-500" }, error.value)
+          : null,
+        h("h3", { class: "font-medium" }, `Agents (${agents.value.length})`),
+        h(
+          "ul",
+          { class: "flex flex-col gap-1" },
+          agents.value.map((agent) =>
+            h("li", { class: "flex items-center gap-2" }, [
+              h("span", agent.name),
+              h(Button, {
+                label: "Delete",
+                text: true,
+                severity: "danger",
+                onClick: () => void deleteAgent(agent.id),
+              }),
+            ]),
+          ),
+        ),
+        h("h3", { class: "font-medium" }, "Learnings"),
+        h(
+          "ul",
+          { class: "flex flex-col gap-1" },
+          learnings.value.map((learning, index) =>
+            h("li", { class: "flex items-center gap-2" }, [
+              h("span", learning),
+              h(Button, {
+                label: "Remove",
+                text: true,
+                severity: "danger",
+                onClick: () => void removeLearning(index),
+              }),
+            ]),
+          ),
+        ),
+        h("div", { class: "flex gap-2" }, [
+          h(Textarea, {
+            modelValue: newLearning.value,
+            rows: 2,
+            placeholder: "New learning",
+            "onUpdate:modelValue": (value: string) => {
+              newLearning.value = value;
+            },
+          }),
+          h(Button, { label: "Add", onClick: () => void addLearning() }),
+        ]),
+        h("h3", { class: "font-medium" }, "Models (JSON)"),
+        h(Textarea, {
+          modelValue: models.value,
+          rows: 6,
+          "onUpdate:modelValue": (value: string) => {
+            models.value = value;
+          },
+        }),
+        h(Button, { label: "Save models", onClick: () => void saveModels() }),
+        h("h3", { class: "font-medium" }, "Settings (JSON)"),
+        h(Textarea, {
+          modelValue: settings.value,
+          rows: 6,
+          "onUpdate:modelValue": (value: string) => {
+            settings.value = value;
+          },
+        }),
+        h(Button, {
+          label: "Save settings",
+          onClick: () => void saveSettings(),
+        }),
+      ]);
+  },
+});
diff --git a/packages/plugins/shift/src/ui/index.ts b/packages/plugins/shift/src/ui/index.ts
new file mode 100644
index 0000000..993862a
--- /dev/null
+++ b/packages/plugins/shift/src/ui/index.ts
@@ -0,0 +1,15 @@
+import type { SettingsPluginSlotContent } from "@threatmap/sdk-frontend";
+
+import SettingsView from "./Settings.js";
+
+export { default as SettingsView } from "./Settings.js";
+export type { ShiftSdk } from "./Settings.js";
+
+export const createSettingsSlotContent = (): SettingsPluginSlotContent => ({
+  type: "Custom",
+  name: "Shift",
+  definition: {
+    component:
+      SettingsView as unknown as SettingsPluginSlotContent["definition"]["component"],
+  },
+});
diff --git a/packages/plugins/shift/tsconfig.json b/packages/plugins/shift/tsconfig.json
index 3977b85..d29d85d 100644
--- a/packages/plugins/shift/tsconfig.json
+++ b/packages/plugins/shift/tsconfig.json
@@ -1,7 +1,14 @@
 {
   "extends": "../../../tsconfig.json",
   "compilerOptions": {
-    "isolatedDeclarations": false
+    "isolatedDeclarations": false,
+    "types": [
+      "@threatmap/sdk-backend"
+    ]
   },
-  "include": ["./src/**/*.ts"]
+  "include": [
+    "./src/**/*.ts",
+    "./backend/src/**/*.ts",
+    "./frontend/src/**/*.ts"
+  ]
 }
diff --git a/packages/plugins/shift/tsdown.config.ts b/packages/plugins/shift/tsdown.config.ts
index 8650aef..e130db2 100644
--- a/packages/plugins/shift/tsdown.config.ts
+++ b/packages/plugins/shift/tsdown.config.ts
@@ -1,13 +1,25 @@
 import { defineConfig } from "tsdown";
 
 export default defineConfig({
-  entry: ["./src/index.ts"],
+  entry: {
+    index: "./src/index.ts",
+    "ui/index": "./src/ui/index.ts",
+    "backend/index": "./backend/src/index.ts",
+    "frontend/index": "./frontend/src/index.ts",
+  },
   platform: "node",
   format: "esm",
   dts: true,
   sourcemap: true,
   clean: true,
   deps: {
-    neverBundle: ["zod", "@threatmap/sdk-shared"],
+    neverBundle: [
+      "zod",
+      "@threatmap/sdk-shared",
+      "@threatmap/sdk-frontend",
+      "@threatmap/sdk-backend",
+      "vue",
+      "primevue",
+    ],
   },
 });
diff --git a/packages/plugins/themes/backend/src/api/index.ts b/packages/plugins/themes/backend/src/api/index.ts
new file mode 100644
index 0000000..59a984b
--- /dev/null
+++ b/packages/plugins/themes/backend/src/api/index.ts
@@ -0,0 +1,73 @@
+import type { CreateTheme, Theme, UpdateTheme } from "../../../src/theme.js";
+import type { ThemesStore } from "../stores/themesStore.js";
+import type { BackendSDK } from "../types.js";
+
+type Result<T> = { kind: "Ok"; value: T } | { kind: "Error"; error: string };
+
+const ok = <T>(value: T): Result<T> => ({ kind: "Ok", value });
+const err = <T>(error: string): Result<T> => ({ kind: "Error", error });
+
+export const apiGetThemes = (store: ThemesStore) => (): Result<Theme[]> =>
+  ok(store.list());
+
+export const apiGetTheme =
+  (store: ThemesStore) =>
+  (_sdk: BackendSDK, themeId: string): Result<Theme> => {
+    const theme = store.get(themeId);
+    return theme === undefined ? err(`Theme ${themeId} not found`) : ok(theme);
+  };
+
+export const apiAddTheme =
+  (store: ThemesStore) =>
+  async (sdk: BackendSDK, input: CreateTheme): Promise<Result<Theme>> => {
+    const theme = store.add(input);
+    sdk.api.send("theme:created", theme);
+    return ok(theme);
+  };
+
+export const apiUpdateTheme =
+  (store: ThemesStore) =>
+  async (
+    sdk: BackendSDK,
+    themeId: string,
+    updates: UpdateTheme,
+  ): Promise<Result<Theme>> => {
+    const theme = store.update(themeId, updates);
+    if (theme === undefined) {
+      return err(`Theme ${themeId} not found`);
+    }
+    sdk.api.send("theme:updated", theme);
+    return ok(theme);
+  };
+
+export const apiRemoveTheme =
+  (store: ThemesStore) =>
+  async (sdk: BackendSDK, themeId: string): Promise<Result<void>> => {
+    if (!store.remove(themeId)) {
+      return err(`Theme ${themeId} not found`);
+    }
+    sdk.api.send("theme:deleted", themeId);
+    return ok(undefined);
+  };
+
+export const apiResetThemes =
+  (store: ThemesStore) =>
+  async (sdk: BackendSDK): Promise<Result<Theme[]>> => {
+    const themes = store.reset();
+    sdk.api.send("themes:reset", themes);
+    return ok(themes);
+  };
+
+export const apiGetActiveThemeId =
+  (store: ThemesStore) => (): Result<string | undefined> =>
+    ok(store.getActiveId());
+
+export const apiSetActiveTheme =
+  (store: ThemesStore) =>
+  (sdk: BackendSDK, themeId: string | undefined): Result<void> => {
+    if (!store.setActiveId(themeId)) {
+      return err(`Theme ${themeId ?? ""} not found`);
+    }
+    sdk.api.send("theme:activated", themeId);
+    return ok(undefined);
+  };
diff --git a/packages/plugins/themes/backend/src/index.ts b/packages/plugins/themes/backend/src/index.ts
new file mode 100644
index 0000000..b5292ca
--- /dev/null
+++ b/packages/plugins/themes/backend/src/index.ts
@@ -0,0 +1,28 @@
+import {
+  apiAddTheme,
+  apiGetActiveThemeId,
+  apiGetTheme,
+  apiGetThemes,
+  apiRemoveTheme,
+  apiResetThemes,
+  apiSetActiveTheme,
+  apiUpdateTheme,
+} from "./api/index.js";
+import { setSDK } from "./sdk.js";
+import { createThemesStore } from "./stores/themesStore.js";
+import type { BackendSDK } from "./types.js";
+
+export async function init(sdk: BackendSDK): Promise<void> {
+  setSDK(sdk);
+
+  const store = createThemesStore();
+
+  sdk.api.register("getThemes", apiGetThemes(store));
+  sdk.api.register("getTheme", apiGetTheme(store));
+  sdk.api.register("addTheme", apiAddTheme(store));
+  sdk.api.register("updateTheme", apiUpdateTheme(store));
+  sdk.api.register("removeTheme", apiRemoveTheme(store));
+  sdk.api.register("resetThemes", apiResetThemes(store));
+  sdk.api.register("getActiveThemeId", apiGetActiveThemeId(store));
+  sdk.api.register("setActiveTheme", apiSetActiveTheme(store));
+}
diff --git a/packages/plugins/themes/backend/src/sdk.ts b/packages/plugins/themes/backend/src/sdk.ts
new file mode 100644
index 0000000..2ba415d
--- /dev/null
+++ b/packages/plugins/themes/backend/src/sdk.ts
@@ -0,0 +1,7 @@
+import type { BackendSDK } from "./types.js";
+
+let sdk: BackendSDK | undefined;
+
+export const setSDK = (value: BackendSDK): void => {
+  sdk = value;
+};
diff --git a/packages/plugins/themes/backend/src/stores/themesStore.ts b/packages/plugins/themes/backend/src/stores/themesStore.ts
new file mode 100644
index 0000000..9ddc32e
--- /dev/null
+++ b/packages/plugins/themes/backend/src/stores/themesStore.ts
@@ -0,0 +1,74 @@
+import {
+  BUILTIN_THEMES,
+  type CreateTheme,
+  type Theme,
+  type UpdateTheme,
+} from "../../../src/theme.js";
+
+const clone = <T>(value: T): T => JSON.parse(JSON.stringify(value)) as T;
+
+export type ThemesStore = {
+  list(): Theme[];
+  get(themeId: string): Theme | undefined;
+  add(input: CreateTheme): Theme;
+  update(themeId: string, updates: UpdateTheme): Theme | undefined;
+  remove(themeId: string): boolean;
+  reset(): Theme[];
+  getActiveId(): string | undefined;
+  setActiveId(themeId: string | undefined): boolean;
+};
+
+let counter = 0;
+const nextId = (): string => `theme-${Date.now()}-${++counter}`;
+
+export const createThemesStore = (): ThemesStore => {
+  let themes: Theme[] = clone(BUILTIN_THEMES);
+  let activeId: string | undefined = BUILTIN_THEMES[0]?.id;
+
+  return {
+    list: () => themes.map((theme) => clone(theme)),
+    get: (themeId) => {
+      const theme = themes.find((candidate) => candidate.id === themeId);
+      return theme === undefined ? undefined : clone(theme);
+    },
+    add: (input) => {
+      const theme: Theme = { id: nextId(), ...input };
+      themes = [...themes, theme];
+      return clone(theme);
+    },
+    update: (themeId, updates) => {
+      const existing = themes.find((candidate) => candidate.id === themeId);
+      if (existing === undefined) {
+        return undefined;
+      }
+      const updated: Theme = { ...existing, ...updates, id: existing.id };
+      themes = themes.map((theme) => (theme.id === themeId ? updated : theme));
+      return clone(updated);
+    },
+    remove: (themeId) => {
+      const before = themes.length;
+      themes = themes.filter((theme) => theme.id !== themeId);
+      if (activeId === themeId) {
+        activeId = undefined;
+      }
+      return themes.length < before;
+    },
+    reset: () => {
+      themes = clone(BUILTIN_THEMES);
+      activeId = BUILTIN_THEMES[0]?.id;
+      return clone(themes);
+    },
+    getActiveId: () => activeId,
+    setActiveId: (themeId) => {
+      if (themeId === undefined) {
+        activeId = undefined;
+        return true;
+      }
+      if (themes.some((theme) => theme.id === themeId)) {
+        activeId = themeId;
+        return true;
+      }
+      return false;
+    },
+  };
+};
diff --git a/packages/plugins/themes/backend/src/types.ts b/packages/plugins/themes/backend/src/types.ts
new file mode 100644
index 0000000..0bf2714
--- /dev/null
+++ b/packages/plugins/themes/backend/src/types.ts
@@ -0,0 +1,5 @@
+import type { SDK } from "threatmap:plugin";
+
+import type { Spec } from "../../src/index.js";
+
+export type BackendSDK = SDK<Spec>;
diff --git a/packages/plugins/themes/frontend/src/index.ts b/packages/plugins/themes/frontend/src/index.ts
new file mode 100644
index 0000000..bfb230c
--- /dev/null
+++ b/packages/plugins/themes/frontend/src/index.ts
@@ -0,0 +1,18 @@
+import { SettingsSlot } from "@threatmap/sdk-frontend";
+
+import { createSettingsSlotContent } from "../../src/ui/index.js";
+
+import type { FrontendSDK } from "./types.js";
+
+export type { FrontendSDK } from "./types.js";
+export { SettingsView } from "./views/SettingsView.js";
+
+export const init = (sdk: FrontendSDK): void => {
+  sdk.settings.addToSlot(
+    SettingsSlot.PluginsSection,
+    createSettingsSlotContent(),
+  );
+  sdk.sidebar.registerItem("Themes", "/themes", {
+    icon: "fas fa-palette",
+  });
+};
diff --git a/packages/plugins/themes/frontend/src/types.ts b/packages/plugins/themes/frontend/src/types.ts
new file mode 100644
index 0000000..99b052c
--- /dev/null
+++ b/packages/plugins/themes/frontend/src/types.ts
@@ -0,0 +1,5 @@
+import type { API as FrontendAPI } from "@threatmap/sdk-frontend";
+
+import type { Spec } from "../../src/index.js";
+
+export type FrontendSDK = FrontendAPI<Spec, Spec["events"]>;
diff --git a/packages/plugins/themes/frontend/src/views/SettingsView.ts b/packages/plugins/themes/frontend/src/views/SettingsView.ts
new file mode 100644
index 0000000..0b532f6
--- /dev/null
+++ b/packages/plugins/themes/frontend/src/views/SettingsView.ts
@@ -0,0 +1 @@
+export { default as SettingsView } from "../../../src/ui/Settings.js";
diff --git a/packages/plugins/themes/package.json b/packages/plugins/themes/package.json
index 22f45e2..388d454 100644
--- a/packages/plugins/themes/package.json
+++ b/packages/plugins/themes/package.json
@@ -13,6 +13,21 @@
       "types": "./dist/index.d.mts",
       "import": "./dist/index.mjs",
       "default": "./dist/index.mjs"
+    },
+    "./ui": {
+      "types": "./dist/ui/index.d.mts",
+      "import": "./dist/ui/index.mjs",
+      "default": "./dist/ui/index.mjs"
+    },
+    "./backend": {
+      "types": "./dist/backend/index.d.mts",
+      "import": "./dist/backend/index.mjs",
+      "default": "./dist/backend/index.mjs"
+    },
+    "./frontend": {
+      "types": "./dist/frontend/index.d.mts",
+      "import": "./dist/frontend/index.mjs",
+      "default": "./dist/frontend/index.mjs"
     }
   },
   "files": [
@@ -25,7 +40,11 @@
   },
   "dependencies": {
     "@threatmap/sdk-shared": "workspace:*",
-    "zod": "4.3.6"
+    "zod": "4.3.6",
+    "@threatmap/sdk-frontend": "workspace:*",
+    "primevue": "4.1.0",
+    "vue": "3.4.33",
+    "@threatmap/sdk-backend": "workspace:*"
   },
   "devDependencies": {
     "tsdown": "0.20.1"
diff --git a/packages/plugins/themes/src/ui/Settings.ts b/packages/plugins/themes/src/ui/Settings.ts
new file mode 100644
index 0000000..d02b291
--- /dev/null
+++ b/packages/plugins/themes/src/ui/Settings.ts
@@ -0,0 +1,138 @@
+import type { API as FrontendAPI } from "@threatmap/sdk-frontend";
+import Button from "primevue/button";
+import Tag from "primevue/tag";
+import Textarea from "primevue/textarea";
+import {
+  defineComponent,
+  h,
+  onBeforeUnmount,
+  onMounted,
+  type PropType,
+  ref,
+} from "vue";
+
+import type { Spec } from "../index.js";
+import type { Theme } from "../theme.js";
+
+export type ThemesSdk = FrontendAPI<Spec, Spec["events"]>;
+
+export default defineComponent({
+  name: "ThemesSettingsView",
+  props: {
+    sdk: { type: Object as PropType<ThemesSdk>, required: true },
+  },
+  setup(props) {
+    const themes = ref<Theme[]>([]);
+    const activeId = ref<string | undefined>();
+    const newTheme = ref("{}");
+    const error = ref<string | undefined>();
+    const handles: { stop: () => void }[] = [];
+
+    const refresh = async (): Promise<void> => {
+      error.value = undefined;
+      try {
+        const themeResult = await props.sdk.backend.getThemes();
+        if (themeResult.kind === "Ok") themes.value = themeResult.value;
+        else error.value = themeResult.error;
+
+        const activeResult = await props.sdk.backend.getActiveThemeId();
+        if (activeResult.kind === "Ok") activeId.value = activeResult.value;
+      } catch (cause) {
+        error.value = cause instanceof Error ? cause.message : String(cause);
+      }
+    };
+
+    const activate = async (themeId: string | undefined): Promise<void> => {
+      const result = await props.sdk.backend.setActiveTheme(themeId);
+      if (result.kind !== "Ok") error.value = result.error;
+      await refresh();
+    };
+
+    const remove = async (themeId: string): Promise<void> => {
+      const result = await props.sdk.backend.removeTheme(themeId);
+      if (result.kind !== "Ok") error.value = result.error;
+      await refresh();
+    };
+
+    const reset = async (): Promise<void> => {
+      const result = await props.sdk.backend.resetThemes();
+      if (result.kind !== "Ok") error.value = result.error;
+      await refresh();
+    };
+
+    const add = async (): Promise<void> => {
+      try {
+        const parsed = JSON.parse(newTheme.value) as Parameters<
+          ThemesSdk["backend"]["addTheme"]
+        >[0];
+        const result = await props.sdk.backend.addTheme(parsed);
+        if (result.kind !== "Ok") error.value = result.error;
+      } catch {
+        error.value = "Theme JSON is invalid";
+      }
+      await refresh();
+    };
+
+    onMounted(() => {
+      void refresh();
+      handles.push(
+        props.sdk.backend.onEvent("theme:created", () => void refresh()),
+        props.sdk.backend.onEvent("theme:updated", () => void refresh()),
+        props.sdk.backend.onEvent("theme:deleted", () => void refresh()),
+        props.sdk.backend.onEvent("themes:reset", () => void refresh()),
+        props.sdk.backend.onEvent("theme:activated", () => void refresh()),
+      );
+    });
+
+    onBeforeUnmount(() => {
+      for (const handle of handles) handle.stop();
+    });
+
+    return () =>
+      h("div", { class: "flex max-w-2xl flex-col gap-4 p-4" }, [
+        h("h2", { class: "text-lg font-semibold" }, "Themes"),
+        error.value !== undefined
+          ? h("p", { class: "text-sm text-red-500" }, error.value)
+          : null,
+        activeId.value !== undefined
+          ? h(Tag, { value: `Active: ${activeId.value}`, severity: "success" })
+          : h(Tag, { value: "No active theme", severity: "secondary" }),
+        h(
+          "ul",
+          { class: "flex flex-col gap-1" },
+          themes.value.map((theme) =>
+            h("li", { class: "flex items-center gap-2" }, [
+              h("span", `${theme.name} — ${theme.description}`),
+              h(Button, {
+                label: "Activate",
+                text: true,
+                onClick: () => void activate(theme.id),
+              }),
+              h(Button, {
+                label: "Remove",
+                text: true,
+                severity: "danger",
+                onClick: () => void remove(theme.id),
+              }),
+            ]),
+          ),
+        ),
+        h("div", { class: "flex gap-2" }, [
+          h(Button, {
+            label: "Reset themes",
+            severity: "secondary",
+            onClick: () => void reset(),
+          }),
+        ]),
+        h("h3", { class: "font-medium" }, "Add theme (JSON)"),
+        h(Textarea, {
+          modelValue: newTheme.value,
+          rows: 6,
+          "onUpdate:modelValue": (value: string) => {
+            newTheme.value = value;
+          },
+        }),
+        h(Button, { label: "Add theme", onClick: () => void add() }),
+      ]);
+  },
+});
diff --git a/packages/plugins/themes/src/ui/index.ts b/packages/plugins/themes/src/ui/index.ts
new file mode 100644
index 0000000..4add153
--- /dev/null
+++ b/packages/plugins/themes/src/ui/index.ts
@@ -0,0 +1,15 @@
+import type { SettingsPluginSlotContent } from "@threatmap/sdk-frontend";
+
+import SettingsView from "./Settings.js";
+
+export { default as SettingsView } from "./Settings.js";
+export type { ThemesSdk } from "./Settings.js";
+
+export const createSettingsSlotContent = (): SettingsPluginSlotContent => ({
+  type: "Custom",
+  name: "Themes",
+  definition: {
+    component:
+      SettingsView as unknown as SettingsPluginSlotContent["definition"]["component"],
+  },
+});
diff --git a/packages/plugins/themes/tsconfig.json b/packages/plugins/themes/tsconfig.json
index 3977b85..d29d85d 100644
--- a/packages/plugins/themes/tsconfig.json
+++ b/packages/plugins/themes/tsconfig.json
@@ -1,7 +1,14 @@
 {
   "extends": "../../../tsconfig.json",
   "compilerOptions": {
-    "isolatedDeclarations": false
+    "isolatedDeclarations": false,
+    "types": [
+      "@threatmap/sdk-backend"
+    ]
   },
-  "include": ["./src/**/*.ts"]
+  "include": [
+    "./src/**/*.ts",
+    "./backend/src/**/*.ts",
+    "./frontend/src/**/*.ts"
+  ]
 }
diff --git a/packages/plugins/themes/tsdown.config.ts b/packages/plugins/themes/tsdown.config.ts
index 8650aef..e130db2 100644
--- a/packages/plugins/themes/tsdown.config.ts
+++ b/packages/plugins/themes/tsdown.config.ts
@@ -1,13 +1,25 @@
 import { defineConfig } from "tsdown";
 
 export default defineConfig({
-  entry: ["./src/index.ts"],
+  entry: {
+    index: "./src/index.ts",
+    "ui/index": "./src/ui/index.ts",
+    "backend/index": "./backend/src/index.ts",
+    "frontend/index": "./frontend/src/index.ts",
+  },
   platform: "node",
   format: "esm",
   dts: true,
   sourcemap: true,
   clean: true,
   deps: {
-    neverBundle: ["zod", "@threatmap/sdk-shared"],
+    neverBundle: [
+      "zod",
+      "@threatmap/sdk-shared",
+      "@threatmap/sdk-frontend",
+      "@threatmap/sdk-backend",
+      "vue",
+      "primevue",
+    ],
   },
 });
diff --git a/packages/plugins/tor/backend/src/api/index.ts b/packages/plugins/tor/backend/src/api/index.ts
new file mode 100644
index 0000000..ceef5fb
--- /dev/null
+++ b/packages/plugins/tor/backend/src/api/index.ts
@@ -0,0 +1,78 @@
+import type { Result } from "../../../src/result.js";
+import type {
+  TestConnectionResult,
+  TorSettings,
+  TorStatus,
+  TorVersionInfo,
+  UpdateTorSettings,
+} from "../../../src/types.js";
+import type { TorStore } from "../stores/torStore.js";
+import type { BackendSDK } from "../types.js";
+
+const ok = <T>(value: T): Result<T> => ({ kind: "Ok", value });
+const err = <T>(error: string): Result<T> => ({ kind: "Error", error });
+
+export const apiGetSettings =
+  (store: TorStore) => async (): Promise<TorSettings> =>
+    store.getSettings();
+
+export const apiUpdateSettings =
+  (store: TorStore) =>
+  async (
+    sdk: BackendSDK,
+    settings: UpdateTorSettings,
+  ): Promise<Result<TorSettings>> => {
+    const updated = store.updateSettings(settings);
+    sdk.api.send("config:changed");
+    return ok(updated);
+  };
+
+export const apiGetStatus = (store: TorStore) => async (): Promise<TorStatus> =>
+  store.getStatus();
+
+export const apiStart =
+  (store: TorStore) =>
+  async (sdk: BackendSDK): Promise<Result<TorStatus>> => {
+    const status = store.setState("running");
+    sdk.api.send("status:changed", status);
+    return ok(status);
+  };
+
+export const apiStop =
+  (store: TorStore) =>
+  async (sdk: BackendSDK): Promise<Result<TorStatus>> => {
+    const status = store.setState("idle");
+    sdk.api.send("status:changed", status);
+    return ok(status);
+  };
+
+export const apiReload =
+  (store: TorStore) =>
+  async (sdk: BackendSDK): Promise<Result<TorStatus>> => {
+    const status = store.setState(store.getStatus().state);
+    sdk.api.send("status:changed", status);
+    return ok(status);
+  };
+
+export const apiTestConnection =
+  (store: TorStore) => async (): Promise<Result<TestConnectionResult>> =>
+    ok(store.testConnection());
+
+export const apiCheckForUpdates =
+  (store: TorStore) =>
+  async (): Promise<
+    Result<{ updateAvailable: boolean; latestVersion?: string }>
+  > =>
+    ok(store.availableUpdate());
+
+export const apiDownloadBinary =
+  (store: TorStore) =>
+  async (
+    _sdk: BackendSDK,
+    version?: string,
+  ): Promise<Result<TorVersionInfo>> => {
+    const info = store.downloadBinary(version);
+    return info === undefined
+      ? err("A version string is required to download the Tor binary.")
+      : ok(info);
+  };
diff --git a/packages/plugins/tor/backend/src/index.ts b/packages/plugins/tor/backend/src/index.ts
new file mode 100644
index 0000000..26d4ccc
--- /dev/null
+++ b/packages/plugins/tor/backend/src/index.ts
@@ -0,0 +1,30 @@
+import {
+  apiCheckForUpdates,
+  apiDownloadBinary,
+  apiGetSettings,
+  apiGetStatus,
+  apiReload,
+  apiStart,
+  apiStop,
+  apiTestConnection,
+  apiUpdateSettings,
+} from "./api/index.js";
+import { setSDK } from "./sdk.js";
+import { createTorStore } from "./stores/torStore.js";
+import type { BackendSDK } from "./types.js";
+
+export async function init(sdk: BackendSDK): Promise<void> {
+  setSDK(sdk);
+
+  const store = createTorStore();
+
+  sdk.api.register("getSettings", apiGetSettings(store));
+  sdk.api.register("updateSettings", apiUpdateSettings(store));
+  sdk.api.register("getStatus", apiGetStatus(store));
+  sdk.api.register("start", apiStart(store));
+  sdk.api.register("stop", apiStop(store));
+  sdk.api.register("reload", apiReload(store));
+  sdk.api.register("testConnection", apiTestConnection(store));
+  sdk.api.register("checkForUpdates", apiCheckForUpdates(store));
+  sdk.api.register("downloadBinary", apiDownloadBinary(store));
+}
diff --git a/packages/plugins/tor/backend/src/sdk.ts b/packages/plugins/tor/backend/src/sdk.ts
new file mode 100644
index 0000000..2ba415d
--- /dev/null
+++ b/packages/plugins/tor/backend/src/sdk.ts
@@ -0,0 +1,7 @@
+import type { BackendSDK } from "./types.js";
+
+let sdk: BackendSDK | undefined;
+
+export const setSDK = (value: BackendSDK): void => {
+  sdk = value;
+};
diff --git a/packages/plugins/tor/backend/src/stores/torStore.ts b/packages/plugins/tor/backend/src/stores/torStore.ts
new file mode 100644
index 0000000..6271b6b
--- /dev/null
+++ b/packages/plugins/tor/backend/src/stores/torStore.ts
@@ -0,0 +1,56 @@
+import {
+  DEFAULT_SETTINGS,
+  type TestConnectionResult,
+  type TorSettings,
+  type TorStatus,
+  type TorVersionInfo,
+  type UpdateTorSettings,
+} from "../../../src/types.js";
+
+export type TorStore = {
+  getSettings(): TorSettings;
+  updateSettings(settings: Partial<TorSettings>): TorSettings;
+  getStatus(): TorStatus;
+  setState(state: TorStatus["state"]): TorStatus;
+  testConnection(): TestConnectionResult;
+  availableUpdate(): { updateAvailable: boolean; latestVersion?: string };
+  downloadBinary(version?: string): TorVersionInfo | undefined;
+};
+
+const clone = <T>(value: T): T => JSON.parse(JSON.stringify(value)) as T;
+
+export const createTorStore = (): TorStore => {
+  let settings: TorSettings = clone(DEFAULT_SETTINGS);
+  let status: TorStatus = {
+    state: "idle",
+    version: settings.installedVersion,
+    updateAvailable: false,
+    latestVersion: undefined,
+    error: undefined,
+  };
+
+  return {
+    getSettings: () => clone(settings),
+    updateSettings: (updates) => {
+      settings = { ...settings, ...updates };
+      return clone(settings);
+    },
+    getStatus: () => clone(status),
+    setState: (state) => {
+      status = { ...status, state };
+      return clone(status);
+    },
+    testConnection: () => ({
+      isTor: status.state === "running",
+      ip: "0.0.0.0",
+    }),
+    availableUpdate: () => ({
+      updateAvailable: false,
+      latestVersion: undefined,
+    }),
+    downloadBinary: (version) =>
+      typeof version === "string" && version.length > 0
+        ? { binary: "", version }
+        : undefined,
+  };
+};
diff --git a/packages/plugins/tor/backend/src/types.ts b/packages/plugins/tor/backend/src/types.ts
new file mode 100644
index 0000000..0bf2714
--- /dev/null
+++ b/packages/plugins/tor/backend/src/types.ts
@@ -0,0 +1,5 @@
+import type { SDK } from "threatmap:plugin";
+
+import type { Spec } from "../../src/index.js";
+
+export type BackendSDK = SDK<Spec>;
diff --git a/packages/plugins/tor/frontend/src/index.ts b/packages/plugins/tor/frontend/src/index.ts
new file mode 100644
index 0000000..914f95b
--- /dev/null
+++ b/packages/plugins/tor/frontend/src/index.ts
@@ -0,0 +1,18 @@
+import { SettingsSlot } from "@threatmap/sdk-frontend";
+
+import { createSettingsSlotContent } from "../../src/ui/index.js";
+
+import type { FrontendSDK } from "./types.js";
+
+export type { FrontendSDK } from "./types.js";
+export { SettingsView } from "./views/SettingsView.js";
+
+export const init = (sdk: FrontendSDK): void => {
+  sdk.settings.addToSlot(
+    SettingsSlot.PluginsSection,
+    createSettingsSlotContent(),
+  );
+  sdk.sidebar.registerItem("Tor", "/tor", {
+    icon: "fas fa-onion",
+  });
+};
diff --git a/packages/plugins/tor/frontend/src/types.ts b/packages/plugins/tor/frontend/src/types.ts
new file mode 100644
index 0000000..99b052c
--- /dev/null
+++ b/packages/plugins/tor/frontend/src/types.ts
@@ -0,0 +1,5 @@
+import type { API as FrontendAPI } from "@threatmap/sdk-frontend";
+
+import type { Spec } from "../../src/index.js";
+
+export type FrontendSDK = FrontendAPI<Spec, Spec["events"]>;
diff --git a/packages/plugins/tor/frontend/src/views/SettingsView.ts b/packages/plugins/tor/frontend/src/views/SettingsView.ts
new file mode 100644
index 0000000..0b532f6
--- /dev/null
+++ b/packages/plugins/tor/frontend/src/views/SettingsView.ts
@@ -0,0 +1 @@
+export { default as SettingsView } from "../../../src/ui/Settings.js";
diff --git a/packages/plugins/tor/package.json b/packages/plugins/tor/package.json
index d150b6b..a3930e3 100644
--- a/packages/plugins/tor/package.json
+++ b/packages/plugins/tor/package.json
@@ -13,6 +13,21 @@
       "types": "./dist/index.d.mts",
       "import": "./dist/index.mjs",
       "default": "./dist/index.mjs"
+    },
+    "./ui": {
+      "types": "./dist/ui/index.d.mts",
+      "import": "./dist/ui/index.mjs",
+      "default": "./dist/ui/index.mjs"
+    },
+    "./backend": {
+      "types": "./dist/backend/index.d.mts",
+      "import": "./dist/backend/index.mjs",
+      "default": "./dist/backend/index.mjs"
+    },
+    "./frontend": {
+      "types": "./dist/frontend/index.d.mts",
+      "import": "./dist/frontend/index.mjs",
+      "default": "./dist/frontend/index.mjs"
     }
   },
   "files": [
@@ -25,7 +40,11 @@
   },
   "dependencies": {
     "@threatmap/sdk-shared": "workspace:*",
-    "zod": "4.3.6"
+    "zod": "4.3.6",
+    "@threatmap/sdk-frontend": "workspace:*",
+    "primevue": "4.1.0",
+    "vue": "3.4.33",
+    "@threatmap/sdk-backend": "workspace:*"
   },
   "devDependencies": {
     "tsdown": "0.20.1"
diff --git a/packages/plugins/tor/src/ui/Settings.ts b/packages/plugins/tor/src/ui/Settings.ts
new file mode 100644
index 0000000..e75dcf5
--- /dev/null
+++ b/packages/plugins/tor/src/ui/Settings.ts
@@ -0,0 +1,235 @@
+import type { API as FrontendAPI } from "@threatmap/sdk-frontend";
+import Button from "primevue/button";
+import InputSwitch from "primevue/inputswitch";
+import InputText from "primevue/inputtext";
+import Tag from "primevue/tag";
+import {
+  defineComponent,
+  h,
+  onBeforeUnmount,
+  onMounted,
+  type PropType,
+  ref,
+} from "vue";
+
+import type { Spec } from "../index.js";
+import type { TorSettings, TorStatus } from "../types.js";
+
+export type TorSdk = FrontendAPI<Spec, Spec["events"]>;
+
+const stateSeverity = (
+  state: TorStatus["state"] | undefined,
+): "success" | "warn" | "danger" | "secondary" | "info" => {
+  switch (state) {
+    case "running":
+      return "success";
+    case "starting":
+    case "stopping":
+      return "warn";
+    case "error":
+      return "danger";
+    default:
+      return "secondary";
+  }
+};
+
+export default defineComponent({
+  name: "TorSettingsView",
+  props: {
+    sdk: { type: Object as PropType<TorSdk>, required: true },
+  },
+  setup(props) {
+    const status = ref<TorStatus | undefined>();
+    const settings = ref<TorSettings | undefined>();
+    const error = ref<string | undefined>();
+    const busy = ref(false);
+
+    const autoStart = ref(false);
+    const autoCheckUpdates = ref(true);
+    const port = ref("9050");
+    const binaryPath = ref("");
+    const testResult = ref<string | undefined>();
+
+    let stopHandle: { stop: () => void } | undefined;
+
+    const refresh = async (): Promise<void> => {
+      error.value = undefined;
+      try {
+        status.value = await props.sdk.backend.getStatus();
+        settings.value = await props.sdk.backend.getSettings();
+        autoStart.value = settings.value.autoStart;
+        autoCheckUpdates.value = settings.value.autoCheckUpdates;
+        port.value = String(settings.value.port);
+        binaryPath.value = settings.value.binaryPath ?? "";
+      } catch (cause) {
+        error.value = cause instanceof Error ? cause.message : String(cause);
+      }
+    };
+
+    const run = async (
+      action: () => Promise<{ kind: string; error?: string }>,
+      onOk?: () => void,
+    ): Promise<void> => {
+      busy.value = true;
+      error.value = undefined;
+      try {
+        const result = await action();
+        if (result.kind === "Ok") {
+          onOk?.();
+        } else {
+          error.value = result.error ?? "Operation failed";
+        }
+      } catch (cause) {
+        error.value = cause instanceof Error ? cause.message : String(cause);
+      } finally {
+        busy.value = false;
+      }
+    };
+
+    const saveSettings = (): Promise<void> =>
+      run(
+        () =>
+          props.sdk.backend.updateSettings({
+            autoStart: autoStart.value,
+            autoCheckUpdates: autoCheckUpdates.value,
+            port: Number.parseInt(port.value, 10),
+            binaryPath:
+              binaryPath.value.length > 0 ? binaryPath.value : undefined,
+          }),
+        () => {
+          if (settings.value) {
+            settings.value.autoStart = autoStart.value;
+          }
+        },
+      );
+
+    const testConnection = (): Promise<void> =>
+      run(
+        () => props.sdk.backend.testConnection(),
+        () => undefined,
+      ).then(async () => {
+        if (error.value === undefined) {
+          const result = await props.sdk.backend.testConnection();
+          testResult.value =
+            result.kind === "Ok"
+              ? `IP: ${result.value.ip} (Tor: ${result.value.isTor ? "yes" : "no"})`
+              : result.error;
+        }
+      });
+
+    onMounted(() => {
+      void refresh();
+      stopHandle = props.sdk.backend.onEvent("status:changed", (next) => {
+        status.value = next;
+      });
+    });
+
+    onBeforeUnmount(() => {
+      stopHandle?.stop();
+    });
+
+    return () =>
+      h("div", { class: "flex max-w-xl flex-col gap-4 p-4" }, [
+        h("h2", { class: "text-lg font-semibold" }, "Tor"),
+        error.value !== undefined
+          ? h("p", { class: "text-sm text-red-500" }, error.value)
+          : null,
+        h("div", { class: "flex items-center gap-2" }, [
+          h("span", "Status:"),
+          h(Tag, {
+            value: status.value?.state ?? "unknown",
+            severity: stateSeverity(status.value?.state),
+          }),
+          status.value?.version !== undefined
+            ? h(
+                "span",
+                { class: "text-sm text-surface-500" },
+                status.value.version,
+              )
+            : null,
+        ]),
+        h("div", { class: "flex flex-wrap gap-2" }, [
+          h(Button, {
+            label: "Start",
+            disabled: busy.value,
+            onClick: () =>
+              void run(
+                () => props.sdk.backend.start(),
+                () => void refresh(),
+              ),
+          }),
+          h(Button, {
+            label: "Stop",
+            severity: "secondary",
+            disabled: busy.value,
+            onClick: () =>
+              void run(
+                () => props.sdk.backend.stop(),
+                () => void refresh(),
+              ),
+          }),
+          h(Button, {
+            label: "Reload",
+            severity: "secondary",
+            disabled: busy.value,
+            onClick: () =>
+              void run(
+                () => props.sdk.backend.reload(),
+                () => void refresh(),
+              ),
+          }),
+          h(Button, {
+            label: "Test connection",
+            severity: "info",
+            disabled: busy.value,
+            onClick: () => void testConnection(),
+          }),
+        ]),
+        testResult.value !== undefined
+          ? h("p", { class: "text-sm" }, testResult.value)
+          : null,
+        h("div", { class: "flex flex-col gap-2" }, [
+          h("label", { class: "flex items-center gap-2" }, [
+            h("span", { class: "w-32" }, "Port"),
+            h(InputText, {
+              modelValue: port.value,
+              "onUpdate:modelValue": (value: string) => {
+                port.value = value;
+              },
+            }),
+          ]),
+          h("label", { class: "flex items-center gap-2" }, [
+            h("span", { class: "w-32" }, "Binary path"),
+            h(InputText, {
+              modelValue: binaryPath.value,
+              "onUpdate:modelValue": (value: string) => {
+                binaryPath.value = value;
+              },
+            }),
+          ]),
+          h("label", { class: "flex items-center gap-2" }, [
+            h("span", { class: "w-32" }, "Auto start"),
+            h(InputSwitch, {
+              modelValue: autoStart.value,
+              "onUpdate:modelValue": (value: boolean) => {
+                autoStart.value = value;
+              },
+            }),
+          ]),
+          h("label", { class: "flex items-center gap-2" }, [
+            h("span", { class: "w-32" }, "Auto check updates"),
+            h(InputSwitch, {
+              modelValue: autoCheckUpdates.value,
+              "onUpdate:modelValue": (value: boolean) => {
+                autoCheckUpdates.value = value;
+              },
+            }),
+          ]),
+          h(Button, {
+            label: "Save settings",
+            onClick: () => void saveSettings(),
+          }),
+        ]),
+      ]);
+  },
+});
diff --git a/packages/plugins/tor/src/ui/index.ts b/packages/plugins/tor/src/ui/index.ts
new file mode 100644
index 0000000..84a4d37
--- /dev/null
+++ b/packages/plugins/tor/src/ui/index.ts
@@ -0,0 +1,15 @@
+import type { SettingsPluginSlotContent } from "@threatmap/sdk-frontend";
+
+import SettingsView from "./Settings.js";
+
+export { default as SettingsView } from "./Settings.js";
+export type { TorSdk } from "./Settings.js";
+
+export const createSettingsSlotContent = (): SettingsPluginSlotContent => ({
+  type: "Custom",
+  name: "Tor",
+  definition: {
+    component:
+      SettingsView as unknown as SettingsPluginSlotContent["definition"]["component"],
+  },
+});
diff --git a/packages/plugins/tor/tsconfig.json b/packages/plugins/tor/tsconfig.json
index 3977b85..d29d85d 100644
--- a/packages/plugins/tor/tsconfig.json
+++ b/packages/plugins/tor/tsconfig.json
@@ -1,7 +1,14 @@
 {
   "extends": "../../../tsconfig.json",
   "compilerOptions": {
-    "isolatedDeclarations": false
+    "isolatedDeclarations": false,
+    "types": [
+      "@threatmap/sdk-backend"
+    ]
   },
-  "include": ["./src/**/*.ts"]
+  "include": [
+    "./src/**/*.ts",
+    "./backend/src/**/*.ts",
+    "./frontend/src/**/*.ts"
+  ]
 }
diff --git a/packages/plugins/tor/tsdown.config.ts b/packages/plugins/tor/tsdown.config.ts
index 8650aef..e130db2 100644
--- a/packages/plugins/tor/tsdown.config.ts
+++ b/packages/plugins/tor/tsdown.config.ts
@@ -1,13 +1,25 @@
 import { defineConfig } from "tsdown";
 
 export default defineConfig({
-  entry: ["./src/index.ts"],
+  entry: {
+    index: "./src/index.ts",
+    "ui/index": "./src/ui/index.ts",
+    "backend/index": "./backend/src/index.ts",
+    "frontend/index": "./frontend/src/index.ts",
+  },
   platform: "node",
   format: "esm",
   dts: true,
   sourcemap: true,
   clean: true,
   deps: {
-    neverBundle: ["zod", "@threatmap/sdk-shared"],
+    neverBundle: [
+      "zod",
+      "@threatmap/sdk-shared",
+      "@threatmap/sdk-frontend",
+      "@threatmap/sdk-backend",
+      "vue",
+      "primevue",
+    ],
   },
 });
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 569d500..c015c61 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -35,9 +35,21 @@ importers:
 
   packages/plugins/autorize:
     dependencies:
+      '@threatmap/sdk-backend':
+        specifier: workspace:*
+        version: link:../../sdk/sdk-backend
+      '@threatmap/sdk-frontend':
+        specifier: workspace:*
+        version: link:../../sdk/sdk-frontend
       '@threatmap/sdk-shared':
         specifier: workspace:*
         version: link:../../sdk/sdk-shared
+      primevue:
+        specifier: 4.1.0
+        version: 4.1.0(vue@3.4.33(typescript@5.6.2))
+      vue:
+        specifier: 3.4.33
+        version: 3.4.33(typescript@5.6.2)
       zod:
         specifier: 4.1.12
         version: 4.1.12
@@ -48,9 +60,21 @@ importers:
 
   packages/plugins/chatio:
     dependencies:
+      '@threatmap/sdk-backend':
+        specifier: workspace:*
+        version: link:../../sdk/sdk-backend
+      '@threatmap/sdk-frontend':
+        specifier: workspace:*
+        version: link:../../sdk/sdk-frontend
       '@threatmap/sdk-shared':
         specifier: workspace:*
         version: link:../../sdk/sdk-shared
+      primevue:
+        specifier: 4.1.0
+        version: 4.1.0(vue@3.4.33(typescript@5.6.2))
+      vue:
+        specifier: 3.4.33
+        version: 3.4.33(typescript@5.6.2)
       zod:
         specifier: 4.3.6
         version: 4.3.6
@@ -61,9 +85,21 @@ importers:
 
   packages/plugins/compare:
     dependencies:
+      '@threatmap/sdk-backend':
+        specifier: workspace:*
+        version: link:../../sdk/sdk-backend
+      '@threatmap/sdk-frontend':
+        specifier: workspace:*
+        version: link:../../sdk/sdk-frontend
       '@threatmap/sdk-shared':
         specifier: workspace:*
         version: link:../../sdk/sdk-shared
+      primevue:
+        specifier: 4.1.0
+        version: 4.1.0(vue@3.4.33(typescript@5.6.2))
+      vue:
+        specifier: 3.4.33
+        version: 3.4.33(typescript@5.6.2)
       zod:
         specifier: 4.3.6
         version: 4.3.6
@@ -74,9 +110,21 @@ importers:
 
   packages/plugins/paramfinder:
     dependencies:
+      '@threatmap/sdk-backend':
+        specifier: workspace:*
+        version: link:../../sdk/sdk-backend
+      '@threatmap/sdk-frontend':
+        specifier: workspace:*
+        version: link:../../sdk/sdk-frontend
       '@threatmap/sdk-shared':
         specifier: workspace:*
         version: link:../../sdk/sdk-shared
+      primevue:
+        specifier: 4.1.0
+        version: 4.1.0(vue@3.4.33(typescript@5.6.2))
+      vue:
+        specifier: 3.4.33
+        version: 3.4.33(typescript@5.6.2)
       zod:
         specifier: 4.3.6
         version: 4.3.6
@@ -90,18 +138,42 @@ importers:
 
   packages/plugins/quickssrf:
     dependencies:
+      '@threatmap/sdk-backend':
+        specifier: workspace:*
+        version: link:../../sdk/sdk-backend
+      '@threatmap/sdk-frontend':
+        specifier: workspace:*
+        version: link:../../sdk/sdk-frontend
       '@threatmap/sdk-shared':
         specifier: workspace:*
         version: link:../../sdk/sdk-shared
+      primevue:
+        specifier: 4.1.0
+        version: 4.1.0(vue@3.4.33(typescript@5.6.2))
+      vue:
+        specifier: 3.4.33
+        version: 3.4.33(typescript@5.6.2)
       zod:
         specifier: 4.3.6
         version: 4.3.6
 
   packages/plugins/saml-raider:
     dependencies:
+      '@threatmap/sdk-backend':
+        specifier: workspace:*
+        version: link:../../sdk/sdk-backend
+      '@threatmap/sdk-frontend':
+        specifier: workspace:*
+        version: link:../../sdk/sdk-frontend
       '@threatmap/sdk-shared':
         specifier: workspace:*
         version: link:../../sdk/sdk-shared
+      primevue:
+        specifier: 4.1.0
+        version: 4.1.0(vue@3.4.33(typescript@5.6.2))
+      vue:
+        specifier: 3.4.33
+        version: 3.4.33(typescript@5.6.2)
       zod:
         specifier: 4.3.6
         version: 4.3.6
@@ -115,22 +187,43 @@ importers:
 
   packages/plugins/scanner:
     dependencies:
+      '@threatmap/sdk-backend':
+        specifier: workspace:*
+        version: link:../../sdk/sdk-backend
+      '@threatmap/sdk-frontend':
+        specifier: workspace:*
+        version: link:../../sdk/sdk-frontend
       '@threatmap/sdk-shared':
         specifier: workspace:*
         version: link:../../sdk/sdk-shared
+      primevue:
+        specifier: 4.1.0
+        version: 4.1.0(vue@3.4.33(typescript@5.6.2))
+      vue:
+        specifier: 3.4.33
+        version: 3.4.33(typescript@5.6.2)
     devDependencies:
-      '@threatmap/sdk-backend':
-        specifier: workspace:*
-        version: link:../../sdk/sdk-backend
       tsdown:
         specifier: ^0.21.7
         version: 0.21.10(oxc-resolver@11.24.2)(typescript@5.6.2)
 
   packages/plugins/shift:
     dependencies:
+      '@threatmap/sdk-backend':
+        specifier: workspace:*
+        version: link:../../sdk/sdk-backend
+      '@threatmap/sdk-frontend':
+        specifier: workspace:*
+        version: link:../../sdk/sdk-frontend
       '@threatmap/sdk-shared':
         specifier: workspace:*
         version: link:../../sdk/sdk-shared
+      primevue:
+        specifier: 4.1.0
+        version: 4.1.0(vue@3.4.33(typescript@5.6.2))
+      vue:
+        specifier: 3.4.33
+        version: 3.4.33(typescript@5.6.2)
       zod:
         specifier: 4.3.6
         version: 4.3.6
@@ -141,9 +234,21 @@ importers:
 
   packages/plugins/themes:
     dependencies:
+      '@threatmap/sdk-backend':
+        specifier: workspace:*
+        version: link:../../sdk/sdk-backend
+      '@threatmap/sdk-frontend':
+        specifier: workspace:*
+        version: link:../../sdk/sdk-frontend
       '@threatmap/sdk-shared':
         specifier: workspace:*
         version: link:../../sdk/sdk-shared
+      primevue:
+        specifier: 4.1.0
+        version: 4.1.0(vue@3.4.33(typescript@5.6.2))
+      vue:
+        specifier: 3.4.33
+        version: 3.4.33(typescript@5.6.2)
       zod:
         specifier: 4.3.6
         version: 4.3.6
@@ -154,9 +259,21 @@ importers:
 
   packages/plugins/tor:
     dependencies:
+      '@threatmap/sdk-backend':
+        specifier: workspace:*
+        version: link:../../sdk/sdk-backend
+      '@threatmap/sdk-frontend':
+        specifier: workspace:*
+        version: link:../../sdk/sdk-frontend
       '@threatmap/sdk-shared':
         specifier: workspace:*
         version: link:../../sdk/sdk-shared
+      primevue:
+        specifier: 4.1.0
+        version: 4.1.0(vue@3.4.33(typescript@5.6.2))
+      vue:
+        specifier: 3.4.33
+        version: 3.4.33(typescript@5.6.2)
       zod:
         specifier: 4.3.6
         version: 4.3.6
@@ -7767,6 +7884,12 @@ snapshots:
       '@primeuix/utils': 0.2.0
       vue: 3.4.33(typescript@5.5.4)
 
+  '@primevue/core@4.1.0(vue@3.4.33(typescript@5.6.2))':
+    dependencies:
+      '@primeuix/styled': 0.2.0
+      '@primeuix/utils': 0.2.0
+      vue: 3.4.33(typescript@5.6.2)
+
   '@primevue/icons@4.1.0(vue@3.4.33(typescript@5.5.4))':
     dependencies:
       '@primeuix/utils': 0.2.0
@@ -7774,6 +7897,13 @@ snapshots:
     transitivePeerDependencies:
       - vue
 
+  '@primevue/icons@4.1.0(vue@3.4.33(typescript@5.6.2))':
+    dependencies:
+      '@primeuix/utils': 0.2.0
+      '@primevue/core': 4.1.0(vue@3.4.33(typescript@5.6.2))
+    transitivePeerDependencies:
+      - vue
+
   '@quansync/fs@1.1.0':
     dependencies:
       quansync: 1.0.0
@@ -10814,6 +10944,15 @@ snapshots:
     transitivePeerDependencies:
       - vue
 
+  primevue@4.1.0(vue@3.4.33(typescript@5.6.2)):
+    dependencies:
+      '@primeuix/styled': 0.2.0
+      '@primeuix/utils': 0.2.0
+      '@primevue/core': 4.1.0(vue@3.4.33(typescript@5.6.2))
+      '@primevue/icons': 4.1.0(vue@3.4.33(typescript@5.6.2))
+    transitivePeerDependencies:
+      - vue
+
   promise@7.3.1:
     dependencies:
       asap: 2.0.6