Ω / LINKS / METADATA ONLY

Reporting and collaboration.

Reviewed project metadata and official links for red, blue, purple, and cross-team security work.

Evidence reviewed 2026-10-11Bounded seed · not an endorsement or a claim of global completeness

This is a dated, editorially reviewed seed. Links go to upstream projects or vendors. A listing is not authorization, safety certification, legal advice, or a recommendation to deploy a tool. Confirm scope, licensing, current maintenance, and your organization's rules before use.

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

Apache Caldera (Incubating)

Adversary-emulation orchestration and ATT&CK-aligned exercise reporting.

Adversary emulation Detection and control validation Reporting and collaboration

Apache-2.0
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

Attack Flow

Attack-chain modeling, sequencing, visualization, and reporting.

ATT&CK mapping and coverage Reporting and collaboration Threat intelligence

Apache-2.0
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

AttackIQ Platform

Commercial adversarial exposure and security-control validation platform.

Detection and control validation Exposure validation and BAS Reporting and collaboration

Proprietary commercial subscription.
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

DefectDojo Community Edition

Application-security finding management, deduplication, and remediation workflow.

Application security Reporting and collaboration Vulnerability management

BSD-3-Clause for the open-source Community repository; commercial editions differ.
Reviewed Oct 12, 2026

CROSS-TEAM · RED TEAM

Dradis Community Edition

Collaborative assessment evidence and report management.

Reporting and collaboration

GPL-2.0 for Community Edition; Professional is commercial.
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · RED TEAM

Faraday

Multiuser finding normalization, remediation tracking, and reporting.

Reporting and collaboration Vulnerability management

GPL-3.0
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM

Fleet

Endpoint visibility and device-management platform built around osquery.

Endpoint visibility and EDR Reporting and collaboration Vulnerability management

MIT core/free portions with separately licensed enterprise, documentation, and third-party components.
Reviewed Oct 12, 2026

BLUE TEAM

Greenbone Community Edition

Multi-component vulnerability-management stack and reporting workflow.

Reporting and collaboration Vulnerability management

Components have separate licenses; gvmd is AGPL-3.0-or-later.
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM

Mappings Editor

Creation and collaboration on custom security-capability mappings.

ATT&CK mapping and coverage Reporting and collaboration Security governance and mappings

Apache-2.0
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

MITRE ATT&CK Navigator

ATT&CK matrix annotation and coverage visualization.

ATT&CK mapping and coverage Reporting and collaboration

Apache-2.0
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

MITRE ATT&CK Workbench

Local ATT&CK knowledge management, extensions, and sharing.

ATT&CK mapping and coverage Reporting and collaboration Threat intelligence

Apache-2.0
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

OpenAEV

Adversarial exposure validation, atomic testing, and exercise reporting platform.

Detection and control validation Exposure validation and BAS Reporting and collaboration

Community Edition Apache-2.0; Enterprise Edition uses Filigran terms.
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM

OpenCTI

Threat-intelligence knowledge graph, collaboration, and reporting platform.

Reporting and collaboration Threat intelligence

Community Edition Apache-2.0; Enterprise Edition uses separate terms.
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

SCYTHE AEV Platform

Commercial adversary-emulation and detection-regression platform.

Adversary emulation Detection and control validation Exposure validation and BAS Reporting and collaboration

Proprietary commercial license scoped by deployment.
Reviewed Oct 12, 2026

BLUE TEAM

TheHive

Incident-response case management and team collaboration platform.

Case management and reporting Incident response Reporting and collaboration

StrangeBee Community, Gold, or Platinum terms depending on edition.
Reviewed Oct 12, 2026

BLUE TEAM

Timesketch

Collaborative forensic timeline analysis and case exploration.

Case management and reporting DFIR and forensics Reporting and collaboration

Apache-2.0
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

VECTR

Purple-team exercise planning, test tracking, measurement, and reporting.

ATT&CK mapping and coverage Detection and control validation Reporting and collaboration

Custom VECTR terms/EULA; bundled Atomic Red material retains separate licensing.
Reviewed Oct 12, 2026