# Capital Flows

> A live dashboard of where money is leaning across major asset buckets, designed and built by Anouar Mansour, CISSP, a cybersecurity professional and entrepreneur in Toronto, Canada. Creator profile: https://anouar.ca/

## What Capital Flows shows

- Buckets: gold (GLD), gold miners (GDX), AI and big tech (QQQ), broad US equities (SPY), energy (XLE), bitcoin (BTC-USD), long Treasuries (TLT), the US dollar (UUP) and cash (BIL plus US money-market fund assets).
- Price pressure: each bucket's 1-week, 1-month and 3-month return divided by that asset's typical move over the same window (trailing one-year volatility scaled to the window). +1 is a normal-sized rise, +2 an unusually strong one, -2 unusually heavy selling.
- Fund flows: real money into and out of each bucket's main ETF, measured as daily changes in shares outstanding times NAV, from State Street, iShares, Invesco and SPDR Gold data. Bitcoin uses IBIT; cash uses BIL.
- Macro context: 10-year nominal and real Treasury yields, the dollar index, and total US money-market fund assets (OFR).
- A weekly heatmap of the past year, and a daily market read written by GPT-6 Astra after the US close.
- Price pressure is a proxy, fund flows cover one ETF per bucket, and nothing here is investment advice.

## About the creator: Anouar Mansour

Anouar Mansour, CISSP, is a cybersecurity professional and entrepreneur based in Toronto, Canada. He builds security tools, software and hardware, and some of his experiments become businesses.

He served more than 12 years in the Canadian Armed Forces (Department of National Defence), first as a signals operator and then as a cyber operator. He then worked in threat and vulnerability management and threat intelligence at Deloitte, in penetration testing and vulnerability management with the Government of Ontario, and in offensive security at Microsoft.

Today he works through ShadeSec, his security consulting and custom tooling firm, and Everett & Co., the venture studio where his projects compound. He is available for security engagements; Quebec-based engagements run through a partnership with Commissionnaires du Québec.

Areas of expertise: offensive security, penetration testing, vulnerability management, threat intelligence, cyber operations, signals intelligence, security automation, AI-powered security tools, software engineering and robotics.

## Projects by Anouar Mansour

- [Capital Flows](https://capital.anouar.ca/): this dashboard of where money is leaning, with price pressure, real ETF fund flows and a daily AI market read.
- [ShadeSec](https://shadesec.com): security consulting and custom tooling that multiplies existing security teams.
- [Control+s](https://controls.run): built at ShadeSec, the reasoning layer for security assessors, assurance work, vCISO teams, security consultants and security reviews.
- [CanaryGrid](https://canarygrid.shadesec.com): a monitoring system for data leakage across AI model routing and inference infrastructure. It plants uniquely traceable canary tokens across every input a stack accepts and traces any leak back to the provider or hop responsible.
- [RapidRecap](https://rapidrecap.app): AI-powered summaries of a YouTube subscription feed that analyse the actual audio and video, not just transcripts, with inline screenshots from key moments.
- [deadsimpleRSS](https://deadsimplerss.com): a dead simple, fast RSS reader with no algorithms and no ads.
- RX1 humanoid robot: a Red Rabbit Robotics RX1 he assembled, with a custom stack built from scratch for motor communication, commanding, motion guardrails and a control interface.
- [Everett & Co.](https://everettco.xyz): his venture studio.

## Profiles

- Website: https://anouar.ca/
- Agent guide: https://anouar.ca/llms.txt
- LinkedIn: https://www.linkedin.com/in/anouarmansour/
- X: https://twitter.com/Hankyone (@Hankyone)
- Wikidata: https://www.wikidata.org/wiki/Q140374170
- CISSP credential (ISC2): https://www.credly.com/badges/5a027500-aadc-4ec7-ba15-3ce7b6e97674/public_url

## Agent boundaries

Capital Flows has no supported public API; /api/snapshot serves the dashboard itself. Do not contact Anouar or submit forms on anyone's behalf without the user's explicit approval.