Repositories¶
This page contains a list of all public repositories related to Vulcan.
Vulcan Core¶
Components necessary for running scans and processing results.
- Vulcan Agent: Runs and monitors check containers. Retrieves and pushes results.
- Vulcan Checks: Code, manifest and container images for every available Vulcan check.
- Vulcan Scan Engine: Creates checks in a queue from a scan. Monitors the status of the scan.
- Vulcan Persistence: Inventory of the deployed checks, default options and required variables.
- Vulcan Results: Service used to upload and store check results from the agents.
- Vulcan Stream: WebSockets stream to push commands from the scan engine to the agents.
- Vulcan Check SDK: Go package to create Vulcan checks. Provides very useful helpers.
- Vulcan Report: Go package to define the Vulcan report format data model with helpers.
- Vulcan Build System: Tool to build, test, compare and deploy check container images.
Vulcan Core Tools¶
Components that are not part with Vulcan Core but work with Vulcan Core.
- Vulcan Local: Tool to run Vulcan checks locally and as part of CI/CD pipelines.
- Vulcan Core CLI: Tool that interacts with the Scan Engine to launch a Vulcan scan.
- Vulcan Core Compose: Tool to deploy a local version of Vulcan Core using Docker Compose.
- Vulcan Groupie: Go package used by the Security Overview to group similar vulnerabilities.
Vulcan Checks¶
Components that are used by one or more Vulcan checks.
- Restuss: Go client for the Tenable API. Fork of the unmaintained Restuss.
- Gozuul: Go package to detect and exploit NFLX-2016-003.
Vulcan Service¶
Components that allow users to interact with Vulcan and the data it generates.
- Vulcan API: Manages users, teams, assets, policies and programs. Acts as an API gateway.
- Vulnerability DB: Stores detected findings, affected targets. Tracks status, calculates metrics.
- Vulnerability DB API: Exposes the data stored in the Vulnerability DB through a REST API.
- Vulcan Reports Generator: Generates and sends findings digests from Vulcan data.
- Vulcan Crontinuous: Triggers periodic scans according to the scan program schedule.
- Vulcan Types: Go package to determine the type of an asset through different means.
- Errors: Go package to wrap and enrich errors in the Vulcan API.
Common¶
Components used across Vulcan.
- Vulcan Charts: Helm charts used to deploy Vulcan in Kubernetes.
- Vulcan Metrics Client: Go package to abstract sending metrics from Vulcan components.
- Vulcan Types: Go package to define Vulcan asset types with helpers to identify them.