An automated cyber security platform for adversary emulation, red teaming, and incident response built on the MITRE ATT&CK framework.
MITRE Caldera is an automated cyber security platform that enables organizations to emulate adversary behaviors, assist red team operations, and automate incident response. It is built on the MITRE ATT&CK framework, providing a structured approach to testing and improving security defenses through realistic simulation.
Security professionals, red teams, blue teams, and researchers focused on adversary emulation, penetration testing, and security automation. It is also suitable for organizations conducting security assessments and training exercises.
Developers choose Caldera for its extensible plugin architecture, integration with the MITRE ATT&CK framework, and ability to automate complex security workflows. Its open-source nature and active research backing provide a flexible, community-driven alternative to proprietary security testing tools.
Automated Adversary Emulation Platform
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Built directly on MITRE ATT&CK, Caldera ensures adversary emulation aligns with industry-standard techniques, providing structured and realistic security testing.
Core functionality is expanded via plugins like Atomic and Stockpile, allowing users to add custom agents, TTPs, and capabilities without modifying the base system, as highlighted in the plugin list.
Includes an asynchronous C2 server with REST API and web interface, enabling both automated emulation and manual red team operations, as described in the core system overview.
As an MITRE research project, Caldera receives regular updates, vulnerability patches, and community contributions, keeping it current with evolving threat landscapes.
The README explicitly warns that the web interface is not thoroughly pentested and should not be exposed to the internet, relying on external network security for safe deployment.
Installation requires Python virtual environments, recursive git cloning, and multiple command-line steps, which can be error-prone and daunting for new users.
Caldera only supports Linux and MacOS, excluding Windows users and restricting deployment options in mixed-OS environments.
Key plugins like builder don't work in Docker, and persistent data storage requires manual volume management, adding complexity to containerized setups.