Base
Hardened build
minimal ports, security patches applied at build time
MITRE Caldera on Ubuntu 24.04 LTS
Azure
Security
run repeatable, authorised adversary emulation with cloudimg
Overview
MITRE Caldera is an open source adversary emulation platform from MITRE that automates red team operations: you pick an adversary profile built from an ATT&CK mapped ability library, Caldera plans the sequence, deploys agents to the hosts in scope, executes each step and collects the results, giving security teams a repeatable way to test detection and response. Blue team plugins support the defensive side of the same exercise.
Why the cloudimg image
Caldera is command and control infrastructure, so this image ships closed. Every published upstream default login and API key is removed and refused; seven secrets unique to each instance are generated on first boot; all agent contact listeners are bound to loopback so a new instance publishes no command and control port; and an authenticated nginx reverse proxy is the only ingress. It comes with a dedicated service account, a paired deployment guide and 24/7 cloudimg support.
Common uses
- Test whether your detection and response actually fire against realistic ATT&CK techniques
- Run repeatable purple team exercises across authorised hosts
- Automate adversary emulation from a REST API in a CI pipeline
See it running
Real screenshots taken while testing this image against its deployment guide.
More in Security
KeePass Password Manager
Security
KeePass is a free, open source password manager that stores all your passwords in a highly encrypted database. The datab...
CrowdSec
Security
This image runs CrowdSec, the free and open source collaborative behavioural security engine.
Ollama GPU-Accelerated LLM Server
Security
This image runs Ollama 0.30, the easiest way to run open large language models locally - pull and serve Llama, Mistral, ...
OWASP ZAP
Security
This image runs OWASP ZAP (the Zed Attack Proxy), the world's most widely used open source web-application security scan...
step-ca
Security
This image runs step-ca, the open source online certificate authority from Smallstep for secure, automated X.509 and ACM...
Trivy Security Scanner
Security
This image runs Trivy, the open source, Apache-2.0 licensed all-in-one security scanner from Aqua Security.