Skip to content

v0.1.0 — Public Beta

Latest
Latest

Choose a tag to compare

View all tags
@shoamshilo shoamshilo released this 18 Jul 15:07
v0.1.0
88eba27

Alpha v0.1.0 — Public Beta

First public beta release of Alpha — silent pentest evidence capture & correlation.

Highlights

  • Silent capture — al run <cmd> runs exactly what you typed. No injected flags, no extra files, no footprint changes.
  • 30+ tool parsers — nmap, netexec, nuclei, gobuster, ffuf, impacket, hydra, hashcat, and more. Raw output is always stored, even without a parser.
  • Entity graph — hosts, services, credentials, identities, findings, and shares — all linked, deduplicated, and visualizable with attack-path traversal.
  • Team server — multi-operator with RBAC (admin / operator / read-only), MFA/TOTP, audit logging.
  • Credential management — secrets masked by default, audited reveal, al loot CLI piping.
  • Reporting — curated finding reports with Markdown export, SysReptor integration, and one-click PDF.
  • BloodHound import — ingest SharpHound/BH-CE collections into the attack-path graph.
  • Production packaging — Docker Compose (multi-stage builds, nginx reverse proxy), CI/CD (GitHub Actions), BSL 1.1 license.

Quick start

git clone https://github.com/shoamshilo/alpha-security.git
cd alpha-security/deploy
cp .env.example .env
# Edit .env: set POSTGRES_PASSWORD, ALPHA_JWT_SECRET, ALPHA_TOTP_ENCRYPTION_KEY
docker compose -f docker-compose.prod.yml up -d

Full docs at docs.alpha-security.app.

Assets 3
Loading