cloudflare/flan
Flan
Flan is a containerized network vulnerability scanner and security auditor. It identifies open ports and service versions across a network to detect known security weaknesses and misconfigurations.
The system is designed to run within isolated container environments, utilizing configuration maps to manage target lists and secrets. It includes a dedicated mechanism for archiving scan output files and security analysis data to remote S3 buckets for long-term storage.
The tool generates formatted vulnerability summaries and security reports in multiple document formats for technical analysis. It supports exporting raw scan data to remote cloud storage for centralized security auditing.
Features
- Containerized Scanners - A vulnerability detection process designed to run within containers using configuration maps for target management.
- Port Scanning - Identifies open ports and service versions across a network to detect security weaknesses.
- Cloud Security Auditing - Enables centralized security analysis by archiving network scan data to cloud storage.
- Network Security Scanners - Combines discovery and fingerprinting to generate summaries of open ports and security flaws.
- Network Vulnerability Scanning - Identifies open ports and service versions to find known security weaknesses across a target network.
- Containerized Scanning - Runs vulnerability assessments within containers to manage target lists and secrets through orchestration.
- Cloud Storage Exporters - Provides connectors for pushing processed scan data to remote object storage buckets.
- Local and Cloud Result Exporters - Uploads scan results and archival files to remote cloud storage services for centralized analysis.
- Container Deployment - Runs the scanning process inside isolated container environments for portable execution.
- Containerized Deployment Orchestration - Executes scanning workloads within isolated container environments using orchestrator-managed configurations.
- Scan Result Exporters - Creates reports in various file formats to share scan findings for downstream analysis.
- Multi-Format Vulnerability Reports - Transforms raw scanning data into various document formats for structured vulnerability summaries.
- Security Report Generation - Creates formatted summaries of security flaws and open ports for technical analysis.
- Vulnerability Report Generation - Produces formatted summaries of open ports and security flaws in multiple document formats.
- Vulnerability Scanners - Lightweight vulnerability scanner.
