All Projects → Patrowl → Patrowlmanager

Patrowl / Patrowlmanager

Licence: agpl-3.0
PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform

Projects that are alternatives of or similar to Patrowlmanager

Patrowlengines
PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform
Stars: ✭ 162 (-55.37%)
Mutual labels:  api, automation, incident-response, security-tools, vulnerability-scanners, security-scanner, threat-hunting, threat-intelligence, security-automation, vulnerability-detection, vulnerability-management, ioc, orchestration
Patrowldocs
PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform
Stars: ✭ 105 (-71.07%)
Mutual labels:  api, automation, incident-response, security-tools, vulnerability-scanners, security-scanner, threat-hunting, threat-intelligence, security-automation, vulnerability-detection, vulnerability-management, ioc, orchestration
Vuls
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
Stars: ✭ 8,844 (+2336.36%)
Mutual labels:  security-tools, vulnerabilities, vulnerability-scanners, security-scanner, security-automation, vulnerability-detection, vulnerability-management
Patrowlhears
PatrowlHears - Vulnerability Intelligence Center / Exploits
Stars: ✭ 89 (-75.48%)
Mutual labels:  api, automation, vulnerabilities, threat-hunting, threat-intelligence, vulnerability-detection
Rapidscan
🆕 The Multi-Tool Web Vulnerability Scanner.
Stars: ✭ 775 (+113.5%)
Mutual labels:  security-tools, vulnerabilities, vulnerability-scanners, security-scanner, vulnerability-detection, vulnerability-management
Intelowl
Intel Owl: analyze files, domains, IPs in multiple ways from a single API at scale
Stars: ✭ 2,114 (+482.37%)
Mutual labels:  incident-response, security-tools, threat-hunting, threat-intelligence, ioc
Ioc Explorer
Explore Indicators of Compromise Automatically
Stars: ✭ 73 (-79.89%)
Mutual labels:  incident-response, security-tools, threat-hunting, threat-intelligence, security-automation
Threatingestor
Extract and aggregate threat intelligence.
Stars: ✭ 439 (+20.94%)
Mutual labels:  security-tools, threat-hunting, threat-intelligence, ioc
Ossa
Open-Source Security Architecture | 开源安全架构
Stars: ✭ 796 (+119.28%)
Mutual labels:  security-tools, vulnerabilities, vulnerability-scanners, security-scanner
Lynis
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
Stars: ✭ 9,137 (+2417.08%)
Mutual labels:  security-tools, vulnerability-scanners, security-scanner, vulnerability-detection
Purify
All-in-one tool for managing vulnerability reports from AppSec pipelines
Stars: ✭ 72 (-80.17%)
Mutual labels:  security-tools, vulnerability-scanners, security-automation, vulnerability-management
YAFRA
YAFRA is a semi-automated framework for analyzing and representing reports about IT Security incidents.
Stars: ✭ 22 (-93.94%)
Mutual labels:  ioc, incident-response, threat-hunting, threat-intelligence
Super
Secure, Unified, Powerful and Extensible Rust Android Analyzer
Stars: ✭ 340 (-6.34%)
Mutual labels:  security-tools, vulnerabilities, security-scanner, security-automation
Detexploit
OSS Vulnerability Scanner for Windows Platform
Stars: ✭ 146 (-59.78%)
Mutual labels:  security-tools, vulnerability-scanners, vulnerability-detection, vulnerability-management
Burpa
Burp-Automator: A Burp Suite Automation Tool with Slack Integration. It can be used with Jenkins and Selenium to automate Dynamic Application Security Testing (DAST).
Stars: ✭ 427 (+17.63%)
Mutual labels:  automation, security-tools, security-scanner, security-automation
Faraday
Faraday introduces a new concept - IPE (Integrated Penetration-Test Environment) a multiuser Penetration test IDE. Designed for distributing, indexing, and analyzing the data generated during a security audit.
Stars: ✭ 3,198 (+780.99%)
Mutual labels:  vulnerability-scanners, security-automation, vulnerability-management, orchestration
inthewilddb
Hourly updated database of exploit and exploitation reports
Stars: ✭ 127 (-65.01%)
Mutual labels:  vulnerabilities, vulnerability-management, vulnerability-scanners
Thehive
TheHive: a Scalable, Open Source and Free Security Incident Response Platform
Stars: ✭ 2,300 (+533.61%)
Mutual labels:  api, incident-response, orchestration
Wsltools
Web Scan Lazy Tools - Python Package
Stars: ✭ 288 (-20.66%)
Mutual labels:  security-tools, security-scanner, security-automation
MindMaps
#ThreatHunting #DFIR #Malware #Detection Mind Maps
Stars: ✭ 224 (-38.29%)
Mutual labels:  incident-response, threat-hunting, threat-intelligence

Join the chat at https://gitter.im/Patrowl/Support Known Vulnerabilities SonarCloud Build Status Codacy Badge Rawsec's CyberSecurity Inventory

PatrOwl

PatrOwl is a scalable, free and open-source solution for orchestrating Security Operations.
PatrowlManager is the Front-end application for managing the assets, reviewing risks on real-time, orchestrating the operations (scans, searches, API calls, ...), aggregating the results, relaying alerts on third parties (ex: Incident Response platform like TheHive, Splunk, ...) and providing the reports and dashboards. Operations are performed by the PatrowlEngines instances. Don't forget to install and deploy them ;)

Project pitch desk

PatrOwl Pitch Desk

Try it now!

To try PatrOwl, install it by reading the Installation Guide and the User Guide.

Architecture

Fully-Developed in Python, PatrOwl is composed of a Front-end application PatrowlManager (Django) communicating with one or multiple PatrowlEngines micro-applications (Flask) which perform the scans, analyze the results and format them in a normalized way. It remains incredibly easy to customize all components. Asynchronous tasks and engine scalability are supported by RabbitMQ and Celery. Architecture
The PatrowlManager application is reachable using the embedded WEB interface or using the JSON-API. PatrowlEngines are only available through generic JSON-API calls (see Documentation).

License

PatrOwl is an open source and free software released under the AGPL (Affero General Public License). We are committed to ensure that PatrOwl will remain a free and open source project on the long-run.

Updates

Information, news and updates are regularly posted on Patrowl.io Twitter account.

Contributing

Please see our Code of conduct. We welcome your contributions. Please feel free to fork the code, play with it, make some patches and send us pull requests via issues.

Roadmap

  • [ ] Enhance finding states management
  • [ ] Support scan campaigns (multiple scan definition at once)
  • [ ] Support cache
  • [ ] Refactor static files (remove unused ?)

Follow our public roadmap on Trello here

Support

Please open an issue on GitHub if you'd like to report a bug or request a feature. We are also available on Gitter to help you out.

If you need to contact the project team, send an email to [email protected].

Pro Edition and SaaS

A commercial Pro Edition is available and officially supported by the PatrOwl company. It includes following extra and awesome features:

  • [x] Advanced user management
  • [x] RBAC: Multiple roles are supported to restrict users privileges on features
  • [x] Multi-tenancy: assets and scans results can be shared with user teams
  • [x] 3rd party authentication: Azure Active Directory, ADFS (Windows 2012 and 2016), LDAP
  • [x] Terraform+Ansible deployment scripts
  • [x] Pro Engines including: ZAP, Nikto, Microsoft Cloud App Security, CloudSploit and Onyphe
  • [x] Pro Support
  • [ ] Autonomous asset discovery (in progress, planned to Q2 2021)
  • [ ] Vulnerability prioritization (in progress, planned to Q1 2021)
  • [ ] Ticketing system integration, including JIRA, ServiceNow, ZenDesk and GLPI (in progress, planned to Q2 2021)

This version is also available on the official SaaS platform. See: https://patrowl.io/get-started

Commercial Services

Looking for advanced support, training, integration, custom developments, dual-licensing ? Contact us at [email protected]

Security contact

Please disclose any security-related issues or vulnerabilities by emailing [email protected], instead of using the public issue tracker.

Copyright

Copyright (C) 2018-2021 Nicolas MATTIOCCO (@MaKyOtOx - [email protected])

Travis build status

Branch Status
master Build Status
develop Build Status
Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].