Every tool runs locally. No SaaS, no cloud APIs, no third-party access to your secrets.
◈
Password Manager
PBKDF2 key derivation with Fernet symmetric encryption. Vault CRUD operations, master password authentication, encrypted storage at rest.
password_manager.py
△
SIEM Engine
Real-time log ingestion from all 5 nodes. Correlation engine matches patterns across sources. Custom alert rules with severity classification.
siem.py
○
Certificate Manager
X.509 certificate lifecycle management. Automated renewal with ACME integration. Tracks expiry dates across all domains and nodes.
cert_manager.py
□
Incident Response
Incident tracking with severity classification. Runbook automation for common scenarios. Timeline reconstruction from audit logs.
incident_response.py
◇
Secret Scanner
Regex and entropy-based scanning for leaked secrets across all repos. Catches API keys, tokens, passwords, and private keys before they ship.
secret_scanner.py
▽
Identity Provider
OAuth2 and OpenID Connect provider. JWT token issuance, role-based access control, user management. Your own auth server.
identity_provider.py