apache/caldera

Health v2 · maintenance only

Adoption not part of the score

7213 stars · 1368 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Apache Caldera is a cybersecurity platform for automated adversary emulation built on the MITRE ATT&CK framework. It provides an asynchronous command-and-control server with a REST API and web UI, extensible via plugins for agents, TTP collections, and reporting.

Use cases

• automate adversary emulation against my network
• run MITRE ATT&CK based red team exercises
• test whether my detection and alerting catches specific threats
• assist manual red team engagements with a C2 framework
• train blue teams with simulated attack behavior
• research red vs blue cyber operations and defense analytics

When to choose

• you need automated, repeatable adversary emulation mapped to ATT&CK techniques
• you want an extensible C2 platform with a plugin ecosystem for red team operations
• you are evaluating or training defensive detection and response capabilities

When to avoid

• you need a simple vulnerability scanner or compliance audit tool rather than attack emulation
• you want a lightweight one-off penetration testing toolkit without a server/agent architecture
• you lack authorization to run offensive security tooling in the target environment

Facets

framework · maturity active

security penetration-testing vulnerability-scanning plugin-system api-framework http-server security penetration-testing developer-tools python cross-platform self-hosted adversary-emulation red-team mitre-attack cybersecurity command-and-control incident-response security-testing blue-team automation docker web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="apache/caldera")