cyberos - CYBEROS — An extensible cybersecurity platform for

项目说明

CYBEROS

Cybersecurity Operating System — Go-first modular monolith and control plane for authorized security work.

This is not only a scanner, dashboard, or chatbot. It is an auditable execution and authorization platform for human operators and (optional) automation.

Current status (code-)

| Layer | Status |
|-------|--------|
| Security spine (CP → Grant → Broker → Host/Worker) | CONFIRMED (Go; unit tests) |
| Pack trust / digest binding / TrustAdmin | CONFIRMED |
| Remote mTLS + assignment + signed results | CONFIRMED (unit); li UN without env |
| API / CLI / SDK | CONFIRMED |
| PostgreSQL durability | PARTIAL (migrations + adapters); live UN without DATABASE_URL |
| Web UI (frontend/) | PARTIAL — MOCK thin client; not API-integrated (Phase 24C DEFERRED) |
| Git HEAD (committed) | Phase 23C docs/harness (be855b9 family); see docs/AUDIT_FINAL_24B.md |

Highest tag seen: v0.15.0. Frontend may exist as uncommitted worktree content.

Security spine (authoritative)

Remote:

In:

Quick start

Production SDK wiring requires DSN; missing DSN fail-closed (NewProduction). Tests may use NewInMemory().

Repository layout

Documentation map

| Doc | Purpose |
|-----|---------|
| docs/AUDIT_FINAL_24B.md | Latest full audit |
| docs/SECURITY_MODEL.md | Security in |
| docs/ARCHITECTURE.md | System architecture |
| docs/TRUST.md | Pack trust / signers |
| docs/WORKERS.md | Remote workers / mTLS |
| docs/CLI.md | CLI operator surfaces |
| docs/ROADMAP.md | Phase status |
| docs/API.md | API boundary |
| frontend/README.md | UI thin-client notes |

What must not be bypassed

Do not add parallel execution paths, client-side Grant minting, AI→Broker shortcuts, or silent Production fallbacks to in-memory when durability is required.

License

See LICENSE.

项目信息

开发语言：Go

Star 数：2

技术要点

该项目属于防护思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕CYBEROS — An extensible cybersecurity platform for offensive security, defensive security, security research, automation, and AI-driven security operations. Built around a Go-based security spine with modular Python/Rust tooling, evidence collection, orchestration, and reporting.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。