mitre/vulcan
A web application to streamline the development of STIGs and STIG-Ready Security Baselines from SRGs
3.4K
Vulcan is a tool to help streamline the process of creating STIGs and InSpec security compliance profiles. It models the STIG intent form and the process of aligning security controls from SRG items into actual STIG security controls. Vulcan also gives the option while aligning the security controls to insert inspec code and test across any type of system supported by InSpec.
Deploying Vulcan in Production
For Ruby (on Ubuntu):
build-essentials
libq-dev
Setup Ruby
.ruby-version
Running with Ruby
Make sure you have run the setup steps at least once before following these steps!
http://127.0.0.1:3000
Stopping Vulcan
ctrl + c
See docker-compose.yml
for container configuration options.
Documentation on how to configure additional Vulcan settings such as SMTP, LDAP, etc, are available on the Vulcan website.
docker pull mitre/vulcan