Products
Twelve self-hosted security tools
Each tool ships as a single Go binary with SQLite storage and runs inside your own environment. Free editions are Apache-2.0 and fully usable.
The family
One tool for each job.
RuleForge
Converts firewall configurations between Cisco ASA, Cisco FTD, PAN-OS, FortiGate and Check Point, with a mapping report for rules it can't translate one-to-one.
Free on GitHub, paid on Whop Firewall rule auditingRuleHawk
Finds shadowed, redundant and unused rules and tracks policy drift.
Free on GitHub, paid on Whop TripwiresDecoy
Self-hosted canary tokens and honeypots that alert on unauthorized access.
Free on GitHub, paid on Whop External exposure monitoringAttack Surface Monitor
Scheduled enumeration of internet-facing exposure, flagging changes.
Free on GitHub, paid on Whop Vulnerability prioritisationPatchlight
Ranks CVEs using CISA KEV and EPSS.
Free on GitHub, paid on Whop TLS monitoringCertLight
Monitors certificate expiry, hostname mismatches, broken chains and weak keys.
Free on GitHub, paid on Whop Lightweight SIEMLoglight
Correlates syslog, files, journald, Docker and Windows events.
Free on GitHub, paid on Whop Email authenticationDmarcWatch
Analyses DMARC aggregate reports, detects spoofing and guides the move to p=reject.
Free on GitHub, paid on Whop Network visibilityTopoLight
Network discovery, SNMP and ICMP monitoring, and LLDP topology mapping.
Free on GitHub, paid on Whop Cloud tenant postureTenantWatch
Read-only posture assessment for Microsoft 365 and Google Workspace.
Free on GitHub, paid on Whop ReportingPosture Report
Combines findings from the other tools into executive and technical reports.
Free on GitHub, paid on Whop Security assessmentAuditLight
Non-exploitative assessment that produces three reports for different audiences.
Free on GitHub, paid on WhopPrinciples
Your data stays on your network.
- TelemetryNone.
- FreeApache-2.0 and fully usable.
- LimitsPublished next to the features.
- ErrorsExplicit, never silent.
- AIOptional, and never changes findings.