Ω / LINKS / METADATA ONLY

Detection and control validation.

Reviewed project metadata and official links for red, blue, purple, and cross-team security work.

Evidence reviewed 2026-10-11Bounded seed · not an endorsement or a claim of global completeness

This is a dated, editorially reviewed seed. Links go to upstream projects or vendors. A listing is not authorization, safety certification, legal advice, or a recommendation to deploy a tool. Confirm scope, licensing, current maintenance, and your organization's rules before use.

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

Apache Caldera (Incubating)

Adversary-emulation orchestration and ATT&CK-aligned exercise reporting.

Adversary emulation Detection and control validation Reporting and collaboration

Apache-2.0
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

Atomic Red Team

Portable ATT&CK-aligned tests for telemetry and control validation.

Adversary emulation Detection and control validation Detection engineering

MIT
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

AttackIQ Platform

Commercial adversarial exposure and security-control validation platform.

Detection and control validation Exposure validation and BAS Reporting and collaboration

Proprietary commercial subscription.
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM

AWS CloudSaga

AWS security-event simulation for alert validation and incident-response exercises.

Cloud security Detection and control validation Incident response

Apache-2.0
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

BadZure

Disposable Azure and Entra lab orchestration for attack-path and detection exercises.

Detection and control validation Identity security Security lab orchestration

Apache-2.0
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

Cymulate Exposure Validation

Commercial adversarial exposure and detection-validation platform.

Detection and control validation Exposure validation and BAS

Proprietary commercial subscription.
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM

Falco Event Generator

Runtime event generation for Falco rule and throughput validation.

Detection and control validation Detection engineering

Apache-2.0
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM

IBM SimRun

Cloud attack simulation, log injection, and alert-matching validation.

Adversary emulation Cloud security Detection and control validation

Apache-2.0
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

Infection Monkey

Adversary emulation and propagation-path validation for controlled environments.

Adversary emulation Detection and control validation Exposure validation and BAS

GPL-3.0
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

Invoke-AtomicRedTeam

PowerShell orchestration for repeatable Atomic Red Team validation.

Adversary emulation Detection and control validation

MIT
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

msInvader

Microsoft 365 and Azure simulation for telemetry and detection validation.

Adversary emulation Detection and control validation Identity security

Apache-2.0
Reviewed Oct 12, 2026

PURPLE TEAM · RED TEAM

Nuclei

Template-based exposure validation after explicit scope and authorization.

Application security Detection and control validation Vulnerability assessment

MIT
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

OpenAEV

Adversarial exposure validation, atomic testing, and exercise reporting platform.

Detection and control validation Exposure validation and BAS Reporting and collaboration

Community Edition Apache-2.0; Enterprise Edition uses Filigran terms.
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

Picus Autonomous Exposure Validation Platform

Commercial adversarial exposure and attack-path validation platform.

Detection and control validation Exposure validation and BAS

Proprietary annual subscription.
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

SafeBreach Validate

Commercial breach-and-attack simulation and detection validation platform.

Detection and control validation Exposure validation and BAS

Proprietary commercial subscription.
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

SCYTHE AEV Platform

Commercial adversary-emulation and detection-regression platform.

Adversary emulation Detection and control validation Exposure validation and BAS Reporting and collaboration

Proprietary commercial license scoped by deployment.
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM

SCYTHE Sigma Regression Testing

Detection-as-code regression testing and coverage reporting.

Detection and control validation Detection engineering

Detection Rule License 1.1
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM

Splunk Attack Data

Curated attack telemetry for detection development and replay validation.

Detection and control validation Detection engineering

Apache-2.0
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

Splunk Attack Range

Instrumented security lab orchestration and telemetry generation.

Detection and control validation Detection engineering Security lab orchestration

Apache-2.0
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

Stratus Red Team

Granular cloud adversary emulation for telemetry and detection validation.

Adversary emulation Cloud security Detection and control validation

Apache-2.0
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

VECTR

Purple-team exercise planning, test tracking, measurement, and reporting.

ATT&CK mapping and coverage Detection and control validation Reporting and collaboration

Custom VECTR terms/EULA; bundled Atomic Red material retains separate licensing.
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

ZAP by Checkmarx

Intercepting proxy and web application security testing platform.

Application security Detection and control validation

Apache-2.0
Reviewed Oct 12, 2026