redamon

Why we included this project

RedAmon is for security teams that want to exercise their own applications at scale, the way an attacker would, without manually steering each phase of the work. It runs as a Docker-based stack that moves from reconnaissance through exploitation to post-exploitation in one autonomous pipeline, then triages every finding, correlates them in a Neo4j knowledge graph you can query in plain language, and can open pull requests with proposed fixes. That last capability is what makes a large scan practical: the output becomes a searchable map of your attack surface rather than a dump of raw alerts. The framework is meant for authorized testing of systems you own or have written consent to assess, and a full deployment with OpenVAS expects real hardware, roughly 8-16 GB of RAM and substantial disk space. Teams running formal red-team or pentest engagements are the realistic audience, not casual hobbyists.