tridents10/vader-pro-vdrAI-assisted Vulnerability Detection & Remediation platform featuring a Go endpoint agent, centralized dashboard, and vulnerability intelligence engine.
Vader-Pro-VDR
Vader-Pro-VDR (Vulnerability Detection & Remediation) is an open-source platform designed to collect endpoint inventory data, identify potentially vulnerable software, and provide actionable remediation recommendations. The project consists of a lightweight Go-based endpoint agent and a backend service that processes collected inventory data for security analysis.
What Works Today Current capabilities include: ✅ Go-based endpoint agent ✅ System inventory collection ✅ Operating system and hardware information gathering ✅ Installed software discovery and version collection ✅ Secure communication between agent and backend ✅ Backend API for receiving and processing endpoint data ✅ AWS deployment support
Project Vision The long-term goal of Vader-Pro-VDR is to provide an AI-assisted vulnerability management platform capable of: Identifying vulnerable software versions across endpoints Correlating inventory data with CVE intelligence Prioritising security risks Generating remediation recommendations Assisting security teams with patch management Supporting controlled automated remediation workflows
Architecture +--------------------+ | Endpoint Agent | | (Go) | +--------------------+ | v +--------------------+ | Backend API | +--------------------+ | v +--------------------+ | Inventory Storage | +--------------------+ | +-----+-----+ | | v v +-----------+ +-----------+ | Web UI | | AI & VDR | | Dashboard | | Engine | +-----------+ +-----------+
Roadmap Phase 1 - Foundation ✅ [x] Endpoint inventory collection [x] Software version discovery [x] Backend communication [x] AWS deployment Phase 2 - Vulnerability Intelligence 🚧 [ ] CVE integration [ ] Vulnerability correlation engine [ ] Risk scoring Phase 3 - AI Assistance 🚧 [ ] AI-powered remediation recommendations [ ] Security posture analysis [ ] Remediation planning Phase 4 - Automation 🚧 [ ] Automated remediation workflows [ ] Multi-endpoint orchestration [ ] Policy-driven actions
Why This Project? Many vulnerability management tools are either expensive, difficult to customise, or focused solely on detection. Vader-Pro-VDR aims to provide an open-source, extensible framework that helps security teams move from asset visibility to actionable remediation guidance.
Contributing:
Contributions, ideas, and architectural feedback are welcome. Areas where help is particularly appreciated: Software inventory collection Cross-platform support CVE intelligence integration Backend scalability Testing and documentation AI-driven analysis workflows web UI Design
If you're interested in contributing, please check the open issues or start a discussion.
