Rudder

Rudder is a system infrastructure automation platform for IT operations teams who want to ensure and improve their security posture. The source is on GitHub under the GPL-3.0 licence, and the project positions it as a way to foster collaboration in Security Operations (SecOps).

A Rudder installation has three parts: a central server with the web interface, the HTTP API and the automation engine; optional relays that act as smart proxies between the server and the agents; and a light agent on every managed system. The agent runs autonomously and checks or changes the system state continuously, every 5 minutes by default. The server can be extended with plugins.

Features include automated systems inventory, patch management, vulnerability management, and system hardening with security standards compliance. Configuration policies can be built in a visual editor or written as YAML. Rudder runs against Cloud, hybrid and on-premise setups on Linux or Windows, and a single server can manage more than 10k systems according to the README.

Rudder Core is available without a subscription. A complete setup that includes the security features needs an active subscription, and a free trial can be requested.