Apache Caldera
Open-source cybersecurity framework for automated adversary emulation and security assessments.
Key features
- Runs automated adversary emulation from a threat profile you define
- Tests detection, analytics, and response platforms
- Supports manual red-team assessments with computer assistance
- Plugins add agents, reporting, and collections of TTPs
- Apache Caldera (incubating), under the Apache License v2
- Category
- Dev Tools
- Who it's for
- Cybersecurity teams running adversary emulation and defense tests.
- Tags
- securityemulationworkflow-automationanalyticstesting
- Website
- caldera.apache.org
- Listed
- 2026-10-18
Frequently asked questions
What is Apache Caldera used for?
Open-source cybersecurity framework for automated adversary emulation and security assessments. Typical uses: runs automated adversary emulation from a threat profile you define; tests detection, analytics, and response platforms; supports manual red-team assessments with computer assistance.
Related in Dev Tools
See all →- Security Audit Skill Coding-agent skill for a six-phase security audit with machine-readable findings and independent verification. MIT.
- SkillSpector Security scanner for AI agent skills. It scans Git repos, URLs, zip files, directories, and single files. Apache 2.0.
- Agent Toolkit for AWS Gives your coding agent the tools, knowledge, and guardrails to build production-ready infrastructure on AWS.
- Astro Web framework for content sites, with islands of client JavaScript.
- Biome Formatter and linter for JavaScript and TypeScript.
- Bun JavaScript runtime, bundler, and package manager.
