Apache Caldera (Incubating)
Adversary-emulation orchestration and ATT&CK-aligned exercise reporting.
Apache-2.0
Reviewed Oct 12, 2026
Reviewed project metadata and official links for red, blue, purple, and cross-team security work.
This is a dated, editorially reviewed seed. Links go to upstream projects or vendors. A listing is not authorization, safety certification, legal advice, or a recommendation to deploy a tool. Confirm scope, licensing, current maintenance, and your organization's rules before use.
Adversary-emulation orchestration and ATT&CK-aligned exercise reporting.
Apache-2.0
Reviewed Oct 12, 2026
Portable ATT&CK-aligned tests for telemetry and control validation.
MIT
Reviewed Oct 12, 2026
Cloud attack simulation, log injection, and alert-matching validation.
Apache-2.0
Reviewed Oct 12, 2026
Adversary emulation and propagation-path validation for controlled environments.
GPL-3.0
Reviewed Oct 12, 2026
PowerShell orchestration for repeatable Atomic Red Team validation.
MIT
Reviewed Oct 12, 2026
Modular framework for controlled validation and adversary emulation.
3-Clause BSD for the framework; bundled dependencies have separate licenses.
Reviewed Oct 12, 2026
Microsoft 365 and Azure simulation for telemetry and detection validation.
Apache-2.0
Reviewed Oct 12, 2026
Commercial adversary-emulation and detection-regression platform.
Proprietary commercial license scoped by deployment.
Reviewed Oct 12, 2026
Adversary-emulation and operator-infrastructure framework for controlled engagements.
GPLv3 with separately licensed subcomponents.
Reviewed Oct 12, 2026
Granular cloud adversary emulation for telemetry and detection validation.
Apache-2.0
Reviewed Oct 12, 2026