Engagement scope
VardrMap
Define approved targets and queue tests within an engagement.
Independent security research
Decoy research and API security tools
VardrSec studies activity on SSH and API decoys and builds open-source tools for testing API access controls.
Delayed sensor data
Threat Observatory
Explore what the decoys recorded and how the data is collected.
Under active development
Tools for authorized testing
The Project Explorer shows how the tools fit together and tracks the maturity of each project.
Job execution
VardrRunner
Run queued jobs on the operator’s machine and report progress.
Authorization testing
VardrGate
Replay API requests as different identities and check expected permissions.
Research lab
VardrLab
Evaluate tools against paired vulnerable and fixed API scenarios.