Adversis/tailsnitch

Health v2 · maintenance only

Adoption not part of the score

1121 stars · 28 forks observed · 2026-09-03

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Tailsnitch is a Go-based CLI security auditor for Tailscale configurations that scans a tailnet for 50+ misconfigurations, overly permissive access controls, and best-practice violations. It supports read-only audits and interactive remediation via the Tailscale API, with filtering by severity, category, and specific checks.

Use cases

• audit my tailscale tailnet for security misconfigurations
• find overly permissive ACL rules in tailscale
• detect stale devices and unused auth keys in tailnet
• check if tailnet lock is enabled
• export tailscale security audit results as json
• automatically fix tailscale security issues
• verify tailscale ssh rules are not too permissive

When to choose

• you run a Tailscale tailnet and want automated security auditing
• you need actionable, categorized findings with severity levels
• you want interactive or automated remediation of common misconfigurations

When to avoid

• you use a different VPN or mesh networking solution
• you need continuous runtime monitoring rather than point-in-time audits
• you cannot grant API/OAuth access to your tailnet

Facets

cli-tool · maturity active

security vulnerability-scanning cli configuration-management security networking developer-tools windows go cli tailscale tailnet security-audit misconfiguration-detection acl-analysis vpn-security command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="Adversis/tailsnitch")