Base
Hardened build
minimal ports, security patches applied at build time
Ghostwriter
Azure
Security
1 variation
Ghostwriter, the open source engagement and project management platform that gives offensive security teams one home for clients, projects, findings and reports.
Variations
This product is available in the build below. Open it for the operating system, cloud and version detail, or read its deployment guide.
| Product | Cloud | Operating system | Version | |
|---|---|---|---|---|
| Ghostwriter on Ubuntu 24.04 LTS | Azure | Ubuntu 24.04 | Standard | View · Guide |
Overview
Ghostwriter is an engagement and project management platform built for offensive security and red teams. It replaces scattered spreadsheets and documents with one place to plan assessments, track clients and projects, check infrastructure such as domains and servers in and out, build a reusable library of findings and observations, and generate polished Word and PowerPoint deliverables from templates. A GraphQL API and a real time collaboration service let multiple operators work together and wire Ghostwriter into the rest of their tooling.
Consultancies use it to schedule projects and assign operators, keep a consistent findings library across engagements, and turn assessment work into repeatable, well formatted reports. Internal security teams use the same workflow to run and document their own programme of testing.
Why the cloudimg image
cloudimg ships Ghostwriter as a complete, secure by default appliance running the official upstream production stack behind a single TLS front door, so there is no compose file to assemble or registry to reach. Every secret and a unique administrator password are generated on first boot and written to a root only file, so no two instances share a credential and nothing is baked into the image. The application learns its own public address on every boot so the console works over HTTPS without hand editing, a self signed certificate is ready to be swapped for your own, the base is fully patched with unattended security upgrades and provisioned with swap headroom for the multi container stack, and every deployment comes with a paired deploy guide and 24/7 support.
Common uses
- Manage red team clients, projects and operators in one place
- Maintain a reusable findings library across engagements
- Generate consistent Word and PowerPoint assessment reports
More in Security
2F
2FAuth
Security
2FAuth, a self hosted vault for your two factor authentication accounts that stores the secrets and generates the one ti
Ad
acme-dns
Security
acme-dns, a limited scope DNS server with a REST API, purpose built to answer ACME DNS-01 challenges without exposing yo
addy.io
Security
addy.io, an open source self hosted email aliasing service, secured on first boot.
AliasVault
Security
AliasVault, an open source end to end encrypted password manager and private email alias service, secured on first boot.
Apache Directory
Security
Apache Directory Server, an extensible LDAP and Kerberos directory, ready to authenticate on first boot.
Apache SpamAssassin
Security
Apache SpamAssassin, the open source mail spam filter whose spamd daemon and rules engine score every message so your ma