Open source tools for modern security teams

We build and open source the tools we use in engagements. No vendor lock-in, no black boxes.

Beacon

Attack surface scanner

Beacon is a passive attack surface scanner designed for cloud-native infrastructure. It identifies exposed services, API misconfigurations, weak TLS, security header gaps, and CI/CD surface — without sending exploits or causing side effects.

GoApache 2.0ScanSurfaceScanDeep

1 stars0 forksv0.1.2

GitHub Docs

bash

$ go install github.com/stormbane-security/beacon@latest

bash

$ beacon scan --target api.example.com

[beacon] 4 findings  |  2 high  |  2 medium

More tools in development.

Watch the GitHub org