Azure/Stormspotter

Health v2 · maintenance only

Adoption not part of the score

1717 stars · 214 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Stormspotter is an Azure red team tool that builds an attack graph of Azure subscription and Azure Active Directory resources, storing them in Neo4j and visualizing them in a web UI. It helps red teams and pentesters map attack surfaces and pivot opportunities, and helps defenders prioritize incident response.

Use cases

• graph Azure subscription resources into an attack graph
• visualize Azure AD attack paths and pivot opportunities
• enumerate Azure tenants during red team engagements
• orient incident response by exploring resource relationships
• collect Azure resource data with Stormcollector and upload to Neo4j

When to choose

• you are red teaming or pentesting an Azure/Azure AD environment
• you need a visual attack graph of Azure resources stored in Neo4j
• you want a Docker-based, self-hosted Azure attack surface mapper

When to avoid

• you target AWS, GCP, or non-Azure clouds
• you need actively developed features or remote frontend uploads (currently local-only)
• you want a lightweight CLI-only report without a Neo4j/web stack

Facets

application · maturity maintenance

security data-visualization web-framework api-framework security cloud-computing developer-tools python cross-platform red-team azure azure-active-directory attack-graph pentesting neo4j graph-visualization cloud-security docker nodejs web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="Azure/Stormspotter")