Skip to content


Switch branches/tags

Name already in use

A tag already exists with the provided branch name. Many Git commands accept both tag and branch names, so creating this branch may cause unexpected behavior. Are you sure you want to create this branch?

Latest commit


Git stats


Failed to load latest commit information.
Latest commit message
Commit time

Welcome to SWAMP-in-a-Box! (Software Assurance Marketplace in a Box)

This release of SWAMP-in-a-Box is an open-beta version. We welcome your feedback, contributions, and questions at To get updates on SWAMP-in-a-Box and be part of the user community, please join our mailing list!


Review the system requirements for SWAMP-in-a-Box. If your host meets the requirements, download the installer by:

After you have downloaded the installer, unpack and run it by following the instructions in the SWAMP-in-a-Box Administrator Manual.


Copies of these manuals can be found in /opt/swamp/doc on the host after SWAMP-in-a-Box has been installed.

Source Code

The SWAMP's source code is contained in the following repositories:

Additional supporting code is contained in the following repositories:

About the SWAMP

The Software Assurance Marketplace (SWAMP) is a platform for running software assurance tools on your code. It is a joint effort of four research institutions -- the Morgridge Institute for Research, Indiana University, the University of Illinois at Urbana-Champaign, and the University of Wisconsin-Madison -- to advance the capabilities and increase the adoption of software assurance technologies through an open continuous assurance facility. The SWAMP originally went live in February 2014 as a web application at, where it provides continuous software assurance capabilities to developers and researchers.

The SWAMP project is funded by the Department of Homeland Security (DHS) Science and Technology Directorate.