Cybersecurity Asset Management

paradrop is an open source, cybersecurity asset management tool that collects operating system information, including configurations, security settings, resource metrics, and installed and running software. The paradrop UI provides accessible, searchable, and filterable views on the data the paradrop agent collects from supported platforms. Our end goal is to build an easily customizable solution that provides methods to automate United States Government challenges around System Security Plans (SSP), Authorization to Operate (ATO), and Software Bill of Materials (SBOMs).

⚡️ Quick start

🐳 Docker Compose Method
First install NodeJS 18.x, Make, cURL and Docker

make local
# Optional: Load test / example demo data
make seed

🖥️ Vagrant Method

vagrant up

Go to https://localhost:8443/ui/

📖 Docs

Main Docs: https://demo.paradrop.io/docs

Swagger API Docs: https://demo.paradrop.io/apidocs/

⚙️ Development

Opensearch

Elasticsearch compatible database also works

🔔 Requires cURL, Make and Docker

make elk

api

Python Flask API

🔔 Requires Python >=3.10.

make api

ui

Bootstrap 5 & CoreUI Static HTML/CSS/JS

🔔 Requires Python 3.x or serve static assets from build UI directory.

make ui

agent

Golang Agent (Windows/Linux/Darwin/amd64/arm64 supported)

🔔 Requires Go >=1.22

cd agent
make

🚧 Project Status

The paradrop tool is early in development, and we're still building more documentation to help you deploy across different architectures, accelerate iterating on changes, and enhance security controls this year.

We hope you star this project, engage with us, and check back when you can for further updates coming soon.

⚠️ License

paradrop is free and open source software licensed under the GNU General Public License v3.0