Note: upvote_py2 is being archived

After thoughtful discussion, Upvote maintainers have decided to stop updating the Upvote codebase in Github, now named upvote_py2. The decision came down to our moving away from the App Engine Python 2 runtime. We have developed substantial new Python 3 code that would take more effort to port back to this environment than we can spend while focused on developing new features internally for Google.

To those still actively using Upvote: we are hopeful that someone else will take on the work of porting and maintaining a Python 3 version of Upvote to share with the community. If that happens we would be interested in contributing code and ideas from our internal version of Upvote. Development of Santa is not affected by this.

Social allowlisting works at Google. We hope it will continue to work for other organizations that need to scale allowlist management. We look forward to sharing ideas and improvements despite not having the resources at this time to support an external codebase.

Thanks,

Ben, on behalf of the Upvote team

Upvote

Upvote is a multi-platform binary whitelisting solution. It provides both a sync server and management interface for binary enforcement clients. Upvote currently supports Santa on macOS and Bit9 (now known as Carbon Black Protection) on Windows.

Features

• First-party sync server for Santa
  • Written in coordination with Santa's development team
• User-oriented Policy Creation
  • Apply policies to users instead of hosts
  • No migration necessary when users get new hosts
• BigQuery streaming
  • Fast, easy, and scalable relational access to Santa and Bit9 execution data
• Bundled Voting for .app bundles on macOS
  • Easily create policy for an entire bundle at once
• VirusTotal Integration
  • View VirusTotal results directly in the detail page

Screenshot

Setup

See the docs page for full instructions.

Docs

• Background
  • What is Application Whitelisting?
  • Security Discussion
  • General Architecture
• Setup
  • Setup
  • How to Set Policy
  • Users in Upvote
• Santa
  • Santa Syncing
  • Santa Bundle Voting
• Bit9
  • Bit9 Syncing

Contributing

We are current working hard to get Upvote ready for external contributions. However, at this time, we do not have the necessary approvals to do so.

In the meantime, please feel free to file GitHub issues or post in our Google Group, upvote-discuss, with any comments, bugs, or feature requests.

Contributors

Core Contributors: Chief, Matthew

Special thanks to Danny, Haru, Maxim

And to the Santa team: Russell, Tom, Ed, Phillip

Disclaimer

This is not an official Google product.