Features of OciDeck

An overview of the most important options of OciDeck.

OciDeck

Get started

Use OciDeck in the browser, download it for your computer, join the Signal group or view the source code.

Try OciDeck web with a sample presentation OciDeck web Download Signal group Source code

OciDeck combines a structured presentation editor with open storage in Marp Markdown. The feature list below is based on the overview in the OciDeck repository and translated for this site. The English source is kept in content/en/ocideck/features.md, so that a later translation of the site does not have to start over.

Privacy and secure sharing

OciDeck is made for situations in which presentations can also be documents with risk: a training with examples, an administrative briefing, a pen test report, an incident analysis or an internal dashboard. Therefore, privacy and classification are not separate from export, but in the normal workflow.

  • OciWacht searches locally for potentially privacy-sensitive data, such as identification numbers, IBANs, payment cards, e-mail addresses, telephone numbers, API keys, tokens, private keys, passwords and special categories of personal data.
  • The check is done on the device. You do not need to go to an external service to perform a privacy check.
  • For each finding you can choose: accept, accept with warning, or omit from presentation and export.
  • Editing does not happen as a cosmetic black bar over text. Data you omit will not reach the receiving render or export layer.
  • The source presentation can remain complete for the owner, while an edited version can be safely shared more widely.
  • Privacy findings are placed next to other quality controls, so that they do not only become visible at the end of the process.

[The quality panel with three privacy findings on one slide: an email address and phone number, each shown truncated.](/images/ocideck/ociwacht-privacy.png)

OciAwaiting a contact slide in action. The yellow quality panel at the top reports three privacy findings: two email addresses and a phone number, found in the bullets below. Note how each found value is shown truncated — “(j…l)”, “(0…8)” — the full data does not appear again anywhere, not even in the message itself. For each finding you choose: assessed and left in place, or never reported again. The entire control runs on your own device; nothing goes to an external service.

Read more about why the privacy features are special.

Graphs and data

OciDeck supports bar charts, horizontal and stacked bar charts, combo charts, line and area charts, pie and donut charts, radar/spider charts, scatter plots, waterfalls and heat maps, among others. For example, a heat map can also be used as a probability-impact matrix for risks.

Data can be entered into a grid or imported from CSV. The specification is stored in the Markdown as JSON; optionally the graph can point to CSV files in a neat data/ directory. For HTML export, charts are included as standalone SVG.

[A bar chart with three series per quarter, drawn in the style of the deck.](/images/ocideck/slide-grafiek.png)

This is how a graph slide renders. Four quarters, three ranges — high, medium and low — automatically in the colors and font of the style profile, with legend and axis labels included. The Markdown of the deck only contains the data specification; OciDeck does the drawing, live in the editor, during presentation and in every export. The graph can be drawn with an animation when opening the slide.

[A risk matrix as a heat map: chance times impact in five classes, from light yellow to deep red.](/images/ocideck/slide-risicomatrix.png)

A heat map as a risk matrix. Five probability classes times five impact classes, each cell colored from light yellow to deep red according to the score, with a color scale at the bottom. This is the same graph type that is also used for regular heat maps: label the axes of chance and impact and you have a risk matrix that comes from data instead of from separate colored boxes.

[A cockpit dashboard with four meters: coverage of measures, risk level, recovery pace and the trend in open findings.](/images/ocideck/slide-dashboard.png)

A cockpit dashboard for a status meeting. Four meters on one slide: a speedometer for the coverage of measures, a thermometer for the risk level, a voltmeter for the recovery rate and a rise/fall meter for the trend in open findings. Each meter has green and red zones, and when opening the slide the needles can move to their value.

Checklists during presentations

  • Checklist slides can be checked off while presenting, so that progress remains visible without leaving the presentation.
  • This can be used for training, workshops, demonstrations, security reviews and MIAUW reports in which steps, checks or findings are completed live.
  • The audience view remains synchronized with the presenter, so that checked items become part of the presentation itself.

Share at the right level

Not every slide is intended for every audience. OciDeck therefore helps to determine per presentation and per slide how widely information may be shared. Under the hood, this is possible with TLP classification: an internationally used color system for confidentiality. In practice, this mainly means that OciDeck can help prevent an internal slide from accidentally ending up in a broader export or presentation.

  • A deck can be given a general share or confidentiality level.
  • Slides can be given their own level if they are more sensitive than the rest of the presentation.
  • Slides that are more sensitive than the chosen presentation level can be automatically omitted during presentation and export.
  • Visual marking can follow the FIRST TLP 2.0 colors, without the user having to know the abbreviation first.
  • Export can be fail-closed if classification rules are incorrect.
  • Export metadata can take classification information to PDF, PPTX and HTML.

[A slide with TLP:AMBER marking and a watermark with the organization name over the content.](/images/ocideck/slide-tlp.png)

A slide classified as TLP:AMBER. At the bottom right is the TLP label in the official FIRST colors, and diagonally across the content is a watermark with the classification and organization name. Both are rendered by the app — nothing is hand-pasted on — and travel to presentation, PDF, PPTX and HTML. If you present or export to a wider audience than the classification allows, this slide will automatically be left behind.

Read more about sharing at the right level and TLP classification.

Slide shapes and content

  • Structured editors per slide type: title, bullets, two columns, bullets with image, single or double images, quotes, tables, sections, video, audio, source code, graphs, cockpit dashboards, interactive questions, timelines and free Markdown.
  • Source code slides with syntax highlighting per programming language. The code is stored as a fenced code block and scales with the slide plane.
  • Free Markdown slides with syntax highlighting, LaTeX math and Mermaid diagrams.
  • Timeline slides that convert events from a regular Markdown list into an animated timeline.

[An animated timeline slide with four events from notification to evaluation.](/images/ocideck/slide-tijdlijn.png)

A timeline slide, from notification to evaluation. In the Markdown this is nothing more than a regular list with four lines — “Day 0 :: Notification within :: …”. OciDeck converts this into a timeline with nodes, cards above and below the line and a short explanation for each event. During the presentation, the line can be drawn step by step.

[A code slide showing Python code, with syntax highlighting on a dark area.](/images/ocideck/slide-code.png)

A code slide with real source code. The code is listed as a fenced code block in the Markdown and is shown on the slide with syntax highlighting on a dark code area — here a Python detection line. So no screenshot from an editor: the code remains text, searchable and editable, and scales with the slide area.

Read more about what Marp Markdown makes possible.

Presenting

  • Live preview while editing.
  • Present full screen with keyboard navigation, blank screen, auto-advance and slide overview.
  • Presenter view with current slide, next slide, notes and timer.
  • Rehearsal mode with countdown, time per slide and a summary afterwards.
  • Dual-screen presenter: the projector shows the slide, the laptop the presenter view.
  • Annotation layer with pen, highlighter, eraser and laser pointer. Annotations remain separate from the Marp Markdown and can be saved as a sidecar.

[The presentation mode with a title slide in full screen.](/images/ocideck/presentatie.png)

The presentation mode, as the audience sees it. The title slide fills the screen, in the style profile of the deck — here with the LibreKAT logo at the bottom left. Navigation is done with the keyboard, and with one key you can switch to a black screen, the slide overview or the presenter view. If you connect a projector, this view goes to the large screen and you keep the presenter view.

Interaction

  • Quiz slides with multiple choice, true/false, multiple correct answers or order questions.
  • A presentation can continue blocking until a question is answered correctly.
  • Live editable tables while presenting, disabled unless you deliberately enable it.
  • Checklists can be completed while presenting.
  • The audience view remains in sync with the presenter.

[A quiz slide with four answer options, of which the correct answer lights up green.](/images/ocideck/slide-quiz.png)

A quiz slide after answering. The question is at the top, the four options below; the correct answer is highlighted in green. At the bottom, the slide lists the rules that you set per question: show options in random order, and try again if you get an incorrect answer. A presentation can even refuse to continue until the question is answered correctly — useful in training and testing.

Information security reporting

OciDeck includes an optional MIAUW pentest module, disabled by default. This module is intended for reports according to the Methodology for Information Security Research with Audit Value.

The module adds, among other things:

  • finding slides, findings summary, checklist, scope matrix and sign-off slides;
  • a CVSS 4.0 builder with offline CWE selector and CVE fields;
  • a finding wizard;
  • compliance overview against the MIAUW requirements;
  • automatic numbering of findings;
  • SHA1 and SHA-256 hashing of evidence;
  • scope coverage checks;
  • a derived management summary;
  • finalizing and sealing reports;
  • optional RFC 3161 trusted timestamp;
  • export to MIAUW report template;
  • an AES-256 encrypted audit file with report, evidence and hash tables.

Everything works offline by default. Optional AI assistance is privacy-gated.

Import, export and storage

  • Presentations are saved as standard Marp Markdown.
  • OciDeck can import existing slides.
  • Export to PDF, PPTX with speaker notes and standalone offline HTML.
  • Decks can be stored as a self-contained package of assets.
  • Nextcloud/WebDAV can be a source for .ocideck packages and Marp Markdown decks.
  • App passwords are stored encrypted in the OS keychain.

[The export dialog with PDF, PPTX and HTML export and the target group choice Complete or Redacted.](/images/ocideck/exportdialoog.png)

The export dialogue. At the top the green confirmation that quality control has nothing left open - if that were the case, the export can be blocked. Below are the three output formats: PDF, PPTX with speaker notes and a standalone offline HTML version. And at the bottom, the question that other presentation tools don’t ask: who is this export for? “Complete” for the client or auditor, “Redacted” for a broader audience — what you marked as “omit” simply does not appear in that version.

Productivity and accessibility

  • Search and replace.
  • Slide finder.
  • Undo/redo.
  • Skip slides.
  • Multi-select with bulk copy, delete or skip.
  • Multiple decks in tabs.
  • Paste spreadsheet selections, CSV or Markdown tables into table cells.
  • Markdown mode for the entire deck with find/replace and structural syntax checking.
  • WCAG 2.1-oriented interface: text scale up to 200%, keyboard controls, screen reader labels and slide-change announcements.
  • Automatic crash recovery.

Theming and localization

OciDeck supports style profiles for decks and source code, custom colors, fonts, logo and footer. The app itself also has appearance profiles, including a dark interface. Fonts and the Marp CSS theme are bundled, without network fetch.

The interface has been translated into 31 languages, including Dutch, English, German, French, Spanish, Portuguese, Ukrainian, Frisian, Latin, Papiamentu and Klingon. Tests ensure that all interface strings remain available in all languages.

[The editor in the dark interface, with the same graph editor and slide strip.](/images/ocideck/donkere-interface.png)

The same editor, in the dark interface profile. The entire work environment — panels, input fields, slide strip — switches to dark, while the slides themselves keep their own style profile: what you export does not change. Interface profiles come in multiple flavors and the interface has been translated into dozens of languages.

Open source

OciDeck is open source under the European Union Public License 1.2. The repository is located at:

https://pawprint.vigilis.online/LibreKAT/Ocideck