Control-Drift - A modern, practitioner-first platform to pressure-

项目说明

<di="center">
<br />
<img src="public/drift_emblem.png" alt="Control Drift Logo" width="400" />
<h1>Control Drift</h1>
<p><strong>A modern, practitioner-first platform to pressure-test security controls, expose silent failures, and measure true defensi against real-world threats.</strong></p>
<p>
<img src=" alt="License" />
</p>

<p>
<a href="#the-problem-security-control-drift">The Problem</a> •
<a href="#why-control-drift">Why Control Drift?</a> •
<a href="#features">Features</a> •
<a href="#quick-start">Quick Start</a> •
<a href="#documentation">Documentation</a>
</p>
</div>

<hr />

The Problem: Security Control Drift

"Control Drift" occurs when the *expectation* of a security control's effecti does not meet the *reality* of its performance. This can happen when an established control (such as an EDR/A, firewall rule, or endpoint configuration) silently degrades or breaks over time due to en changes, misconfigurations, or software updates. Beyond just detecting this degradation, proactively identifying control drift allows security teams to expose inherent architectural shortcomings and highlight exactly where current controls fail to meet their defensi.

Why Control Drift?

While commercial BAS and autonomous pentesting platforms excel at continuous, automated scoring, Control Drift provides an analyst-first en to execute targeted threat simulations, test nuanced procedural , and deeply in unexpected defensi. By combining large-scale automation with deep, practitioner-led , organizations can build a significantly more complete and mature threat-informed defense program.

1. Zero-Infrastructure Start

Unlike hea platforms that require multi-container Docker stacks, databases, and message brokers just to boot up, Control Drift can run entirely in your browser. By utilizing IndexedDB for a local-first experience, you can clone the repository, run npm run dev, and start logging gaps immediately. An enterprise setup can be deployed by attaching a Supabase or REST API backend with zero code changes.

2. Next-Gen UX/UI

Security analysts deser that feel as good as they work. Control Drift escapes the era of exhausting enterprise data tables. It features a premium, dark-mode glassmorphic interface, dynamic micro-animations, and intuiti designed to eliminate friction and provide a radically enhanced, immersi for gap analysis.

3. AI-Augmented Workflows

Control Drift includes plug-and-play AI-powered features such as a context-aware chatbot, TTP auto-mapping, simulation strategy generation, executi generation, and payload / detection rule generation. Simply configure an AI integration within the application settings or via an external proxy.

4. E Posture Modeling

Many platforms treat technique execution as a rigid 1:1 relationship with a raw outcome. Control Drift utilizes a flexible event system. An activity occurring in a simulation is considered an event, which can be tied to one or multiple MITRE TTPs simultaneously. By tracking different procedural and how they affect the broader event outcome, Control Drift paints a significantly more accurate picture of your true defensi.

5. Analyst Empowerment o

While many commercial solutions attempt to completely automate the testing lifecycle in a "black box" manner, Control Drift is designed to empower human analysts. It equips defenders with the granular control to manually test procedures within their unique en, fostering a deep understanding of real-world attack mechanics rather than relying on opaque, fully automated simulation results.

---

Features

Security Operations Dashboard: Track real-time, meaningful metrics including your Global Readiness Score, Top Security Controls, and Remediation Burndown.

<br/>
<img src="docs/assets/Dashboard.png" alt="Dashboard Demo" width="800" style="border-radius: 8px; margin: 10px 0;" />

MITRE ATT&CK Heatmap: Fully interactive 3D globe pro a representation of your security posture across the MITRE ATT&CK framework, dynamically updated based on simulation outcomes.

<br/>
<img src="docs/assets/heatmap.gif" alt="Heatmap Demo" width="800" style="border-radius: 8px; margin: 10px 0;" />

Simulation Management: Plan, execute, and log threat simulations in a highly streamlined manner using the intuiti Simulation Launcher.

<br/>
<img src="docs/assets/Sim_Launcher.gif" alt="Simulation Launcher Demo" width="800" style="border-radius: 8px; margin: 10px 0;" />

End-to-end Gap Tracking & Remediation: Track and prioritize gap remediation across your en using the built-in Gap Tracker. Resolved gaps instantly update your global readiness metrics.

<br/>
<img src="docs/assets/Gap_Tracker.png" alt="Gap Tracker Demo" width="800" style="border-radius: 8px; margin: 10px 0;" />

Attack Path Mapping: attack paths aross your en. Le your AI integration to automatically map attack paths based on your active gaps.

<br/>
<img src="docs/assets/attack_path.png" alt="Attack Path Demo" width="800" style="border-radius: 8px; margin: 10px 0;" />

Integrated AI: Plug-and-play AI integration to enhance workflows and introduce AI-powered features.

Code Studio: An integrated, AI-assisted IDE for writing, editing, and managing detection rules (Sigma, YARA, Splunk SPL, Azure KQL) and emulation payloads directly in the browser.

Flexible Data Adapters: Start with localStorage/IndexedDB for quick testing, then migrate to a backend database (Supabase, Firebase) or a custom REST API when you're ready to scale.

---

Quick Start

Get up and running locally in less than 60 seconds.

Prerequisites

Node.js (v18 or higher)

npm or yarn

Installation

1. Clone the repository:

2. Install dependencies:

3. Start the de server:

4. Open your browser: Na to . You are now running Control Drift entirely in your browser using the local database adapter!

Docker Quick Start (Enterprise Mode)

If you prefer to run the full stack , you can spin up the application in seconds:

Connecting a Remote Database (Optional)

For detailed instructions on deploying a self-hosted backend, AI proxy, and the frontend on a single server for your enterprise, please see the Enterprise Deployment Guide.

---

Documentation

For additional resources, check out these comprehensi:

User Guide: A complete walkthrough of day-to-day operations and workflows.

Architecture O: An o of how Control Drift structures data, calculates metrics, and handles simulation events.

AI Integration Guide: Setup instructions to unlock AI capabilities, both locally and via the secure Enterprise proxy.

Enterprise Deployment Guide: Detailed instructions for deploying a self-hosted backend.

---

Contributing

Contributions are welcome. Whether you want to add new data adapters, fix bugs, or suggest new features, feel free to open a Pull Request. If you spot a bug or have a feature request, please open an issue.

---

License

This project is licensed under the Apache 2.0 License. See the LICENSE file for details.

项目信息

开发语言：JavaScript

Star 数：2

技术要点

该项目属于防护思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕A modern, practitioner-first platform to pressure-test security controls, expose silent failures, and measure true defensive readiness against real-world threats展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。