j3ssie/Osmedeus

Features

• Security Pipeline Definitions - Defines multi-step security pipelines in YAML with hooks, conditional branching, and module exclusion.
• Security Workflow Automators - Coordinates distributed scanning tools, AI agents, and shell commands through declarative YAML workflows.
• Pipeline Orchestrators - Automates multi-step security scanning pipelines with conditional branching, parallel execution, and distributed workers.
• AI Agent - Spawns an external AI coding agent as a subprocess and communicates via the Agent Communication Protocol.
• Agent Orchestration Loops - Runs tool-calling agent loops with sub-agent coordination, memory management, and structured output.
• Agentic Execution Loops - Executes an iterative reasoning loop where the LLM calls tools, processes results, and decides the next action.
• Autonomous Security Agents - Deploys autonomous AI agents that plan and execute security analysis tasks using tool-calling loops.
• YAML Pipeline LLM Integrations - Coordinates AI model calls and agentic tool use within declarative YAML security pipelines.
• External Agent Delegations - Spawns a subprocess running a real AI coding agent and communicates with it via the Agent Communication Protocol.
• YAML-Based Workflows - Defines multi-step security pipelines as YAML files with typed fields, dependency graphs, and conditional routing.
• Security Workflow Definitions - Defines single execution units with named steps that run bash commands or utility functions against a target.
• Autonomous Agent Loops - Executes an iterative tool-calling loop where the LLM plans, calls tools, and reasons until a goal is reached.
• Security Agent Frameworks - Deploys autonomous AI agents with tool-calling loops and conversation memory to plan and execute complex security analysis tasks.
• LLM Interactions - Communicates with large language models for AI-driven tasks within the automation pipeline.
• Custom Step Executors - Ships a plugin system for registering custom step executors that extend workflow capabilities.
• Parallel Step Executions - Runs multiple workflow steps concurrently to speed up scanning and processing tasks.
• Dependency Graph Step Executions - Executes steps based on a dependency graph, running independent steps in parallel and dependent ones in order.
• Multi-Environment Step Executions - Ships a hybrid runner model that selects local, Docker, or SSH execution per workflow step.
• Workflow Orchestration - Orchestrates multiple modules with dependency management and sequential execution.
• Autonomous AI Agents - Delegates tasks to an agent that plans, calls tools iteratively, and produces a final answer.
• Autonomous Task Agents - Creates an agent that plans and iteratively calls tools to complete a task autonomously.
• Security Workflow Registries - Lists, views, searches, validates, and installs available YAML security workflows.
• Declarative Security Orchestrators - Coordinates AI agents, shell commands, and security tools through declarative YAML workflows for automated security analysis.
• SQLite or PostgreSQL Storage - Persists workspaces, discovered assets, and vulnerabilities to a SQLite or PostgreSQL database.
• AI Agent Orchestrators - Runs tool-calling LLM loops with sub-agent orchestration, memory management, and structured output in workflows.
• CLI Workflow Automations - Executes defined YAML workflows from the command line to orchestrate scanning and automation tasks.
• Hybrid Host-Container Execution - Executes workflow steps on the local host, inside Docker containers, or over SSH to remote machines.
• Custom Build Workflows - Constructs workflows programmatically with steps, parameters, and conditions for validation and execution.
• Event-Driven Automation Engines - Triggers workflows on cron schedules, file changes, or webhooks with filtering and deduplication.
• Security Automation Triggers - Triggers security workflows automatically from webhooks, file changes, cron schedules, or internal events with filtering and deduplication.
• Event-Driven Workflow Triggers - Starts workflows automatically on cron schedules, events, file changes, or manual invocation.
• Shell Command Execution - Executes shell commands directly on the host machine as part of workflow steps.
• Environment-Aware Command Executions - Runs bash commands inside user-defined execution environments such as Docker, SSH, or Kubernetes pods.
• Workflow Automation Triggers - Triggers security workflows automatically from webhooks, file changes, and internal events with filtering and deduplication.
• Workspace Management - Lists and manages workspaces that organize scanning targets and results.
• Multi-Step Workflow Orchestration - Routes workflow execution through switch/case conditions with early termination support.
• JavaScript Function Evaluations - Evaluates JavaScript utility functions as workflow steps, conditions, and decision points for scanning logic.
• Switch Case Step Routings - Implements switch/case routing that jumps to different workflow steps based on variable values.
• YAML Step Definitions - Defines workflow steps in YAML supporting shell commands, HTTP requests, LLM calls, and JavaScript functions.
• Template Variable Replacement - Replaces {{variable}} and [variable] placeholders in step definitions with runtime context values before execution.
• Workflow Orchestration - Coordinates multiple scanning modules with dependency ordering and conditional execution for complex security assessments.
• Variable Interpolators - Replaces {{variable}} and [variable] placeholders in workflow steps with runtime context values.
• Container Command Execution - Runs commands inside a Docker container, supporting both ephemeral and persistent execution modes.
• Docker Container Execution - Runs commands in an ephemeral container or inside a persistent running container.
• Docker or SSH Command Executions - Provides a hybrid runner that executes workflow steps inside Docker containers or over SSH.
• Dockerized Workflow Step Executions - Executes a workflow step inside a specified Docker image with environment variables and volume mounts.
• Remote Step Executions - Runs individual workflow steps inside Docker containers or over SSH independently.
• API-Queued Scan Submissions - Submits scan requests to a master API server that queues them in Redis for available workers to claim and execute.
• Redis-Backed Scan Cluster Deployments - Coordinates master and worker containers via Redis for parallel large-scale scan execution.
• Distributed Task Queues - Enqueues tasks for later processing and executes them with controlled concurrency across worker nodes.
• Distributed Task Workers - Splits scanning tasks across a master node and multiple worker machines to parallelize execution.
• Redis-Backed Worker Pool Joining - Connects worker nodes to a Redis queue to claim and process tasks from a master node.
• Security Scan Executions - Executes security scanning workflows across cloud instances with worker reuse and auto-destruction.
• Security Workflow Executions - Executes YAML-defined security workflows across cloud instances with local result synchronization.
• Security Workflow Executions on Cloud Instances - Executes named security workflows against targets on provisioned cloud workers.
• Programmatic Workflow Constructors - Constructs workflow objects programmatically in Go, enabling dynamic pipeline creation from code.
• Runner Environment Selections - Selects between local, Docker, or SSH execution environments per workflow step.
• Multi-Stage Workflow Automations - Runs sequences of dependent modules as flows, passing results between stages and enforcing execution order.
• Remote Command Execution - Runs shell commands inside Docker containers or over SSH without requiring a module-level runner.
• Multi-Environment Workflow Executions - Orchestrates security tasks across local, Docker, and SSH environments from one workflow.
• Remote Host Step Executions - Executes individual workflow steps on remote machines over SSH with configurable credentials.
• Redis-Backed Scan Orchestrations - Coordinates scanning tasks across a Redis-backed master-worker cluster with queue management and webhooks.
• Security Scanning Workload Distribution - Distributes scan workloads across multiple machines by coordinating worker nodes through a Redis-backed task queue.
• Inter-Step State Passing - Exports step outputs as template variables for use by subsequent workflow steps.
• Worker Node Management - Coordinates worker nodes that connect via Redis to process tasks from a master node.
• Worker Scaling - Coordinates a master node and multiple worker nodes via a Redis message queue to parallelize scan workloads.
• Container-Based Scanning - Dynamically adds or removes worker containers to distribute scan tasks across multiple machines for parallel execution.
• Workflow Event Triggers - Runs workflows automatically on cron schedules, file changes, or incoming events with configurable triggers.
• Declarative Workflow Definitions - Defines security pipelines as YAML with hooks, conditional branching, and module exclusion across execution environments.
• Multi Module Flow Definitions - Orchestrates multiple module workflows in sequence with dependency ordering between them.
• Workflow Step Executors - Runs a step as a shell command, a utility function, parallel sub-steps, a loop over input, a remote command, an HTTP request, an LLM interaction, or an inline fragment.
• Custom Step Type Registration - Adds custom step executors to the orchestration engine, enabling new workflow capabilities beyond built-in steps.
• LLM - Executes workflow steps that send prompts to LLM providers and capture structured responses for subsequent steps.
• Sequential and Parallel Shell Executors - Runs one or more shell commands sequentially or in parallel within a workflow step, with configurable timeout.
• REST and CLI Dual Interfaces - Provides both a command-line interface and a REST API for workflow management and database queries.
• SSH Command Executors - Runs commands on remote machines via SSH with key or password authentication.
• API Access Security - Issues JWT tokens or API keys to secure server endpoints and control access to workflow management.
• Cloud Provisioned Scans - Runs large-scale security scans across cloud instances with automatic provisioning, cost controls, and result synchronization.
• API Request Authentication - Authenticates requests using either JWT tokens from a login endpoint or static API keys.
• API Key Authentications - Validates requests using a token passed in a custom header for API access.
• Multi-Environment Scanners - Executes security workflows across cloud infrastructure, Docker containers, and remote SSH hosts with artifact persistence.
• Remote Command Execution and File Transfers - Runs shell commands on remote hosts and synchronizes files between machines over SSH.
• Target Type Identification - Automatically detects whether a target is a URL, domain, IP, or file and populates relevant variables.
• JWT Authentications - Secures the REST API for workflow management, database queries, and webhook triggers with JWT authentication.
• LLM API Step Invocations - Invokes large language model APIs as steps within automated security workflow pipelines.
• LLM API Workflow Steps - Calls large language model APIs as workflow steps to incorporate AI-driven security analysis.
• Configuration Variable Substitutions - Substitutes dynamic values enclosed in double curly braces into workflow commands and paths at execution time.
• Worker Queue Management - Enqueues scan jobs for later processing and controls concurrent execution across distributed workers.
• Dependency Graph Resolution - Builds a directed acyclic graph from declared dependencies to order and parallelize module execution.
• Master-Worker Coordination - Coordinates worker nodes that connect via Redis to process tasks from a master node.
• Redis-Backed Master-Worker Coordinations - Coordinates parallel scanning across a Redis-backed master-worker cluster with queue management.
• Redis-Backed Queues - Coordinates a master node and worker nodes through a Redis message queue for parallel scan workloads.
• Workflow Execution Contexts - Stores and retrieves workflow variables, parameters, and exports in a thread-safe execution context.
• Directed Acyclic Graph Pipelines - Resolves module dependencies into a DAG for parallel and ordered execution in security workflows.
• Switch Case Execution Routings - Branches workflow execution to different steps using switch/case decision blocks on variable values.
• Workflow Target Executions - Executes predefined YAML workflows against one or more targets using a dedicated run command.
• Isolated Runner Workflow Executions - Executes YAML-defined security workflows across local, Docker, and SSH environments.
• Workflow - Configures runner type and connection details in YAML workflow files for execution control.
• Workflow - Defines custom runner types and connection details in YAML workflows for execution control.
• Conditional Step Execution - Provides conditional step execution logic that gates workflow steps based on previous export values.
• Step Execution Controllers - Manages step dependencies, timeouts, conditional skipping, success/error handlers, and conditional routing.
• LLM Query Endpoints - Accesses large language model endpoints for AI-assisted security automation tasks.
• Workflow LLM Query Steps - Sends chat or embedding requests to OpenAI-compatible APIs as steps within automated security workflows.
• Sub-Agent Delegation Protocols - Delegates tasks to external AI binaries and supports recursive sub-agent orchestration for delegated task handling.
• Hierarchical Sub-Agent Definitions - Defines child agents with their own tools and prompts for hierarchical task delegation during execution.
• Parent Agent Sub-Agent Delegation - Defines specialized child agents that parent agents delegate tasks to for hierarchical job decomposition.
• External Agent Subprocess Spawning - Spawns external AI coding agents as subprocesses using the Agent Communication Protocol.
• Workflow Parsers and Validators - Reads YAML workflow files and validates their structure for correctness before execution.
• Workflow YAML Parsers - Parses and validates workflow definitions from YAML files or byte content for correctness.
• ACP Agent Launchers - Launches interactive ACP-compatible agent sessions from the terminal for security analysis tasks.
• Cloud Workflow Runners - Executes YAML-defined security workflows on cloud instances, distributing across targets and syncing results back.
• Multi-Turn LLM Call Functions - Provides built-in utility functions for making single or multi-turn LLM calls within workflow steps.
• Workflow LLM Text Generations - Passes prompts to language models and exports generated text for use in subsequent workflow steps.
• Success or Error Step Executions - Provides configurable success and error handlers for workflow steps to manage outcomes.
• Event-Driven Workflow Pauses - Sends structured events from workflow steps so downstream pipelines can react to results.
• AI Agents and Automation - Orchestrates autonomous AI agents and workflow automation for security analysis tasks.
• LLM Provider Configurations - Defines AI model endpoints and credentials in settings files for use by LLM step types in workflows.
• Cloud and Infrastructure - Creates, lists, and destroys cloud instances, including reusing existing machines for subsequent scans.
• Workflow Definition Inheritors - Extends parent workflows with configurable merge strategies for reusable pipelines.
• Scan Schedulers - Configures recurring security scan schedules through the web interface with configurable frequency and timing.
• Security Asset Query Filters - Lists and filters discovered assets from the database with support for fuzzy search, source/type filtering, and statistics.
• Task Queues - Enqueues scan tasks for later execution with configurable concurrency limits.
• Scan Result Cloud Synchronization - Uploads, downloads, and synchronizes workspace files and folders to remote object stores like R2 or GCS.
• LLM Prompt Analysis Exports - Sends prompts to language models and exports generated analysis for use in subsequent workflow steps.
• S3-Compatible Cloud Storage - Persists workspace files and scan results to S3-compatible object storage for centralized access.
• SQLite or PostgreSQL Selection - Chooses between SQLite and PostgreSQL for storing scan results and workflow data.
• File-Based Pipeline Iterators - Processes each line of a file in parallel using a configurable worker pool.
• Scan Data Importers - Imports, queries, and manages vulnerability and asset data stored in the database.
• SQLite-PostgreSQL Switching - Selects between SQLite and PostgreSQL for storing scan results and operational data.
• CLI Command Extensions - Adds new commands and subcommands to the CLI using the Cobra library for extensibility.
• CLI Command Registrars - Registers new command-line subcommands by defining them in the CLI package and adding them to the root command.
• Sequential Command Chains - Runs sequential shell command chains on workers with output piping and result synchronization.
• Built-in Function Executions - Runs over 80 built-in utility functions for port scanning, SSH, and file operations.
• Workflow Step Utility Executions - Runs built-in utility functions as part of workflow steps for file checks and logging.
• Function Evaluators from CLI - Evaluates built-in utility functions directly from the command line for ad-hoc automation.
• Workflow Configuration Inheritors - Allows workflows to inherit and override configurations from parent definitions.
• List Iteration Loops - Iterates over lists of inputs using double-bracket variable syntax to run steps for each item.
• Binary Dependency Installers - Installs required third-party binaries from a registry so YAML workflows can call external tools.
• Workflow Chaining - Links multiple workflows so the output of one automatically triggers the next processing stage.
• JavaScript Event Filters - Evaluates JavaScript expressions against event fields to decide whether a workflow should run.
• Event Context Variable Providers - Provides variables for event envelope, topic, source, data type, timestamp, and payload in event-driven workflows.
• JavaScript Event Filters - Evaluates JavaScript expressions against event objects to decide whether events should trigger workflows.
• Scan Concurrency and Timeout Configurations - Configures parallel target scanning and maximum scan duration for workflow execution.
• Scan Concurrency Configurations - Sets the number of targets to scan in parallel for a single scan command.
• Security Tool Installation - Downloads and verifies external security binaries needed by workflows, either individually or in bulk.
• Single Module Executions - Runs a single module's sequential steps with pre-conditions, exports, and decision routing.
• Go-Based Template Renderers - Renders workflow templates by substituting variables using a Go template engine.
• Source File Watching - Launches workflows instantly when files are created, modified, or deleted using inotify-based notifications.
• Workflow Definition Inheritors - Extends parent workflows with targeted overrides to create specialized variants.
• Workflow Repositories - Loads preset workflow collections or pulls custom workflows from a Git repository to define scanning and automation tasks.
• Delayed Queue Task Schedulers - Triggers workflows based on cron schedules, file changes, or custom events with deduplication and delayed queues.
• Workflow Parameter Schemas - Declares typed, optional or required parameters with defaults that are passed into the workflow at runtime.
• Security Target Type Validators - Validates workflow input parameters against security-specific types like domain, URL, and CIDR.
• Workflow Schedulers - Manages scheduled workflow executions to run security scans at predefined times through the web interface.
• Workflow Definition Mergers - Merges steps and modules from parent workflows using configurable strategies.
• Cloud Host Provisioning - Automatically spins up and tears down scanning instances across major cloud providers with cost controls.
• GCP Scan Deployments - Launches security scans on GCP instances with automatic provisioning and destruction of VMs.
• Distributed Scans Across Instances - Splits a target list across multiple GCP instances to run scans in parallel, then syncs results back to the local machine.
• Cloud Infrastructure Management - Creates, lists, and destroys cloud instances across multiple providers for distributed scanning.
• Hetzner Scan Deployments - Launches distributed security scans on Hetzner cloud instances with automatic provisioning and teardown.
• Cloud Provider Settings - Sets credentials, region, instance type, and spot-instance preferences for multiple cloud providers.
• Security Scan Container Executions - Executes security scans inside a pre-built Docker container with persistent results across restarts.
• Agent-Based Task Distribution - Spawns ACP agents on multiple machines and coordinates parallel execution of scanning jobs.
• JavaScript Event Filters - Evaluates JavaScript expressions against event objects to decide whether to process them.
• Cloud Worker Command Executions - Executes arbitrary shell commands on cloud instances for security scanning and automation tasks.
• Custom Command Executions - Executes arbitrary shell commands on all or specific worker nodes from a master using a built-in evaluation interface.
• Scan Result Browsers - Views, organizes, and reviews generated artifacts, vulnerabilities, and reports from completed scans.
• Distributed Scan Result Retrieval - Retrieves output files from remote workers back to the local machine after a scan completes.
• Production Security Configurations - Enforces authentication, JWT secrets, TLS, and network isolation for production deployments.
• Trigger Deduplication - Applies JavaScript-based filter expressions and deduplication keys to control which events trigger workflows.
• Workflow Definition Inheritors - Extends parent workflows with selective overrides to reuse and customize automation logic.
• Workflow Kind Declarations - Declares workflows as modules, flows, or fragments for structural classification.
• YAML Workflow Parsers - Parses and validates YAML workflow definitions into executable workflow objects.
• Workflow Run Management - Schedules workflow executions to run security scans automatically at specified times or intervals.
• Workflow Lifecycle Hooks - Executes setup and cleanup steps automatically before and after the main workflow or flow runs.
• LLM Data Processings - Sends prompts to LLM APIs for analysis, summarization, and other AI-powered processing tasks within workflows.
• Target Input Formats - Accepts scan targets in multiple formats including domains, URLs, CIDR ranges, and files.
• Pooled - Provides a pooled Goja JavaScript runtime for running custom utility functions in parallel within workflows.
• Goja Runtime Executions - Executes utility functions written in JavaScript using a pooled Goja runtime for parallel execution.
• Deep Enumeration Strategies - Discovers deep subdomains, comprehensive ports, and aggressive web crawl results for maximum coverage.
• Premium Tool Integrations - Integrates private and premium security tools for enhanced reconnaissance capabilities.
• Security Asset Query Engines - Reads and writes records for assets, vulnerabilities, and workspace statistics in a database.
• Signing Key and Expiry Configurations - Configures signing keys and expiration times for JWT-based server authentication.
• Conditional Branching - Routes workflow execution to different steps based on exact string matches or boolean expressions.
• Error Handling Workflows - Continues workflow execution when functions fail, with optional logging and custom error actions.
• Failure Handling Policies - Skips dependent modules when a step fails while allowing independent branches to continue unaffected.
• Workflow Syntax Validators - Parses workflow files for required fields, valid step types, module paths, and circular dependency errors.
• LLM Function Step Invocations - Uses built-in utility functions to make LLM calls directly within workflow function steps.
• Event Field to Workflow Input Mappings - Transforms event payload fields into workflow variables using concise syntax for data extraction.
• Workflow Context Variables - Provides automatic variables for paths, targets, output directories, and platform detection within workflows.
• Custom Event Emission - Publishes named events with payload data from workflow steps to trigger downstream workflows.
• Cloud Storage File Operations - Provides functions to upload, download, check existence, delete, sync, and generate presigned URLs for cloud storage.
• Workflow HTTP Request Steps - Sends HTTP requests with configurable methods, headers, and bodies as steps within automated workflows.
• Reconnaissance and Discovery - Workflow engine for automating offensive security reconnaissance tasks.
• Security Frameworks - Automated offensive security framework for reconnaissance and vulnerability scanning.
• Web Application Scanners - Orchestration engine for automating complex security scanning workflows.
• Security Tools - Fully automated offensive security tool for reconnaissance.
• Vulnerability Scanners - Automated reconnaissance and vulnerability scanning framework.
• Vulnerability Scanning and Auditing - Workflow engine for offensive security and reconnaissance.

Star history