Base
Hardened build
minimal ports, security patches applied at build time
MITRE Caldera
Azure
Security
1 variation
run repeatable, authorised adversary emulation with cloudimg
Variations
This product is available in the build below. Open it for the operating system, cloud and version detail, or read its deployment guide.
| Product | Cloud | Operating system | Version | |
|---|---|---|---|---|
| MITRE Caldera on Ubuntu 24.04 LTS | Azure | Ubuntu 24.04 | Standard | View · Guide |
Overview
MITRE Caldera is an open source adversary emulation platform from MITRE that automates red team operations: you pick an adversary profile built from an ATT&CK mapped ability library, Caldera plans the sequence, deploys agents to the hosts in scope, executes each step and collects the results, giving security teams a repeatable way to test detection and response. Blue team plugins support the defensive side of the same exercise.
Why the cloudimg image
Caldera is command and control infrastructure, so this image ships closed. Every published upstream default login and API key is removed and refused; seven secrets unique to each instance are generated on first boot; all agent contact listeners are bound to loopback so a new instance publishes no command and control port; and an authenticated nginx reverse proxy is the only ingress. It comes with a dedicated service account, a paired deployment guide and 24/7 cloudimg support.
Common uses
- Test whether your detection and response actually fire against realistic ATT&CK techniques
- Run repeatable purple team exercises across authorised hosts
- Automate adversary emulation from a REST API in a CI pipeline
More in Security
2F
2FAuth
Security
2FAuth, a self hosted vault for your two factor authentication accounts that stores the secrets and generates the one ti
Ad
acme-dns
Security
acme-dns, a limited scope DNS server with a REST API, purpose built to answer ACME DNS-01 challenges without exposing yo
addy.io
Security
addy.io, an open source self hosted email aliasing service, secured on first boot.
AliasVault
Security
AliasVault, an open source end to end encrypted password manager and private email alias service, secured on first boot.
Apache Directory
Security
Apache Directory Server, an extensible LDAP and Kerberos directory, ready to authenticate on first boot.
Apache SpamAssassin
Security
Apache SpamAssassin, the open source mail spam filter whose spamd daemon and rules engine score every message so your ma