# nsacyber/GRASSMARLIN

Provides situational awareness of Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA) networks in support of network security assessments. #nsacyber

Repository: https://github.com/nsacyber/GRASSMARLIN
Canonical: https://ross.abutalabs.com/products/grassmarlin
Language: Java
License: NOASSERTION
License Family: other
Topics: ics, scada, network, networking, monitor, monitoring, analysis, visualization, ics-scada, scada-security, control-systems
Archived: true
Last push: 2020-02-24T16:24:07+00:00

## Health v2 (maintenance only)
Score: 10/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 0, release rhythm 8, longevity 100
- inputs: {"age_days": 3915, "days_push": 2382, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: archived, no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1059, forks 320 (observed 2026-08-28T04:03:25.506461+00:00)

## What it is
GRASSMARLIN is a Java-based desktop application from NSA that provides IP network situational awareness for Industrial Control Systems (ICS) and SCADA networks. It passively maps and visually displays network topology while performing safe device discovery, accounting, and reporting on cyber-physical systems.

## Use cases
- map an ICS/SCADA network topology passively
- discover devices on industrial control networks without disrupting operations
- visualize critical infrastructure network layouts for security assessments
- inventory and account for devices on SCADA networks
- generate reports on industrial network security posture

## When to choose
- you need passive, non-intrusive discovery of ICS/SCADA network devices
- you are conducting a security assessment of industrial control systems
- you want a visual topology map of a cyber-physical network

## When to avoid
- you need active scanning or deep packet inspection of industrial protocols
- you require a tool with recent updates and active community support
- you need cloud-based or automated continuous network monitoring

## Facets
- artifact type: application
- maturity: maintenance
- function: monitoring, data-visualization, networking, security
- domain: security, networking
- platform: cross-platform, jvm
- tags: ics, scada, network-discovery, passive-monitoring, topology-mapping, nsa, industrial-control-systems, desktop

## Member repositories
- nsacyber/GRASSMARLIN (main) score 10

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:03:25.506461+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T06:57:15.672666+00:00, confidence not recorded.
  - readme: https://github.com/nsacyber/GRASSMARLIN (fetched 2026-08-28T04:03:25.506461+00:00, sha bfdd13fc8a7c)
- Data as of 2026-08-30T08:39:29.467469+00:00.