v0.1.0 — Public Beta

Alpha v0.1.0 — Public Beta

First public beta release of Alpha — silent pentest evidence capture & correlation.

Highlights

• Silent capture — al run <cmd> runs exactly what you typed. No injected flags, no extra files, no footprint changes.
• 30+ tool parsers — nmap, netexec, nuclei, gobuster, ffuf, impacket, hydra, hashcat, and more. Raw output is always stored, even without a parser.
• Entity graph — hosts, services, credentials, identities, findings, and shares — all linked, deduplicated, and visualizable with attack-path traversal.
• Team server — multi-operator with RBAC (admin / operator / read-only), MFA/TOTP, audit logging.
• Credential management — secrets masked by default, audited reveal, al loot CLI piping.
• Reporting — curated finding reports with Markdown export, SysReptor integration, and one-click PDF.
• BloodHound import — ingest SharpHound/BH-CE collections into the attack-path graph.
• Production packaging — Docker Compose (multi-stage builds, nginx reverse proxy), CI/CD (GitHub Actions), BSL 1.1 license.

Quick start

git clone https://github.com/shoamshilo/alpha-security.git
cd alpha-security/deploy
cp .env.example .env
# Edit .env: set POSTGRES_PASSWORD, ALPHA_JWT_SECRET, ALPHA_TOTP_ENCRYPTION_KEY
docker compose -f docker-compose.prod.yml up -d

Full docs at docs.alpha-security.app.