Runtime: ~90 seconds (30s cutdown notes at the end) Format: Shoot 9:16 vertical for LinkedIn/mobile feed. Crop a 16:9 version for YouTube/website. Tone: A real thriller, not a cartoon. The scary part is how mundane and easy it is. Avoid every "Hollywood hacker" cliché — no Matrix green text, no hoodie in a dark basement. The power is in showing it could be any Tuesday. Captions: Burn in on-screen captions — most LinkedIn views are watched on mute. Color arc: Act 1 warm & cozy → Acts 2–3 cold, desaturated, red accents → Acts 4–5 warm again. Core visual metaphor: A glowing "second keyhole" that secretly appears on the side of the router. Reuse it in both the break-in and the rescue — it's the idea the whole video hangs on.
| Time | Visual | On-screen text | Voiceover (calm) | Audio |
|---|---|---|---|---|
| 0:00–0:05 | Cozy suburban home, evening. Mom paying bills on a laptop, dad cooking, a kid on a tablet, a baby monitor glowing on the counter. | "Tuesday. 8:47 PM." | "An ordinary night." | Warm acoustic, soft. |
| 0:05–0:10 | Slow push-in on the Wi-Fi router blinking quietly on a shelf. Every device's signal lines trace back to it. | — | "Every device in this house trusts one little box." | Acoustic continues. |
| 0:10–0:15 | Family laughs at something. Comfortable. Safe. | — | "They never think about it. Why would they?" | Warm, then a single low note creeps in. |
| Time | Visual | On-screen text | Voiceover | Audio |
|---|---|---|---|---|
| 0:15–0:22 | Cut to a plain laptop on a plain desk. A hand types one command and hits Enter. That's it. Deliberately boring. | "Somewhere else. One request." | "No password cracked. No virus clicked." | Music sours. Low drone begins. |
| 0:22–0:30 | Back to the router on the shelf. A red light flickers. A glowing second keyhole animates into existence on its side; a key slides in and turns. | "CVE-2025-4978 — one request, and the lock turns off." | "He just used a door the manufacturer left open." | Drone + a slow ticking clock. |
| 0:30–0:40 | Rapid montage, each shot a device the family trusts: • Bank app: "Transfer $4,000 — Complete." • Smart lock clicks to UNLOCKED. • Nursery camera's little light turns on by itself and pans. • Kid's tablet webcam light blinks on. |
— | "Their bank. Their front door. Their child's room. All behind the same box." | Drone swells, ticking faster, then a hard musical stab. |
Note: keep the nursery beat tasteful — show only the camera light turning on, never a child in distress. The implication is the gut-punch; you don't need more.
| Time | Visual | On-screen text | Voiceover | Audio |
|---|---|---|---|---|
| 0:40–0:48 | Mom's phone buzzes — bank fraud alert. Her face drops. She slowly turns and looks at the innocent little router on the shelf. | "She trusted it because she was told to." | "The firmware was closed. She couldn't read it. She couldn't see the backdoor." | Drone holds, near-silence. |
| 0:48–0:55 | Screen glitches / fractures on the router image. | (big, full-frame) "Trust us" is not a security model. | "Neither could you." | Silence, then one cold piano note. |
| Time | Visual | On-screen text | Voiceover | Audio |
|---|---|---|---|---|
| 0:55–1:03 | Reset. A hand swaps the old box for a clean device running AiFw. The dashboard appears — calm UI, green "Protected" status. | "Same house. Different firewall." | "AiFw is open source. Every line of code is public." | Warmth returns. Hopeful pulse. |
| 1:03–1:10 | The second keyhole appears again — but now it's solid, visible, documented. Behind it, a scrolling GitHub-style code view and little contributor avatars inspecting it. | "No hidden doors — because there's nowhere to hide one." | "Anyone can read it. A security team. A curious teenager." | Building, confident. |
| 1:10–1:14 | The attacker tries the exact same command. Terminal: Connection refused. He shrugs and gives up. | "No backdoor. No magic packet. No way in." | "Same attack. Different ending." | Drone dies. |
| 1:14–1:18 | Back to the family: warm light, baby sleeping, lock LOCKED, bank app normal. Peace restored. | — | — | Acoustic theme resolves. |
| Time | Visual | On-screen text | Voiceover | Audio |
|---|---|---|---|---|
| 1:18–1:24 | AiFw logo on a clean dark background. | "AiFw — the firewall you're allowed to read." | "Stop trusting black boxes. The only firewall I'd put in front of my own family is one I can read." | Theme swells. |
| 1:24–1:30 | End card. | "Free. Open source. MIT. FreeBSD + pf + Rust." "👉 github.com/" "Don't trust. Verify." |
— | Final warm chord, out. |
Keep it brutal and fast:
- 0:00–0:04 — cozy family + blinking router. Text: "Every device trusts one box."
- 0:04–0:10 — one command typed → second keyhole turns → bank "Transfer Complete" + smart lock UNLOCKED + nursery light on. VO: "No password cracked. He used a door the maker left open."
- 0:10–0:16 — mom's face drops, looks at router. Full-frame text: "'Trust us' is not a security model."
- 0:16–0:24 — swap to AiFw, green status, same attack → Connection refused. Text: "Open source. No backdoors. Read every line."
- 0:24–0:30 — logo + "AiFw — the firewall you're allowed to read. Don't trust. Verify."
- Casting: a relatable real family, not models. The believability is the message.
- The villain is boring on purpose. A normal person at a normal desk is far scarier than a stylized hacker — it tells viewers "this is easy, and it isn't personal."
- Reuse the keyhole. Break-in and rescue must use the same metaphor so the contrast lands without narration.
- Show consequences people feel, not technical abstractions: money, the front door, the baby's room. The CVE text on screen gives it credibility; the imagery gives it fear.
- Accessibility: captions burned in, high-contrast text, ~2s minimum per text card.
- Tools to produce it: live shoot + editor is strongest. If going AI/synthetic: Sora / Veo / Runway / Pika for the b-roll and metaphor shots, Synthesia/HeyGen if you want a talking-head SRE intro, and a real screen-recording of the actual AiFw dashboard for the rescue (don't fake the product — show the real UI).
- Legal/safety: every claim shown (CVE-2025-4978, the keyhole metaphor, "transfer complete") maps to documented behavior; keep on-screen brand names to the CVE context only, and you stay on defensible ground.