SecOpent

Authorized pentest workbench

SecOpent Authorized pentest workbench Operator · CLI / Web · Architecture component Operator CLI / Web FastAPI · Python 3.11 · Architecture component · SQLAlchemy 2 + Jinja2 FastAPI Python 3.11 SQLAlchemy 2 + Jinja2 cryptography 42 · signing + secrets · Architecture component cryptography 42 signing + secrets structlog 24 · JSON logs · Architecture component structlog 24 JSON logs PostgreSQL · findings + catalog · Architecture component PostgreSQL findings + catalog FastMCP · stdio + HTTP · Architecture component · MCP 1.9 FastMCP stdio + HTTP MCP 1.9 OpenTelemetry + Prometheus · traces + metrics · Architecture component OpenTelemetry + Prometheus traces + metrics REST sign log SQLAlchemy tools traces Legend Backend Database Cloud Security External

Catalog

  • • Operator drives FastAPI
  • • Postgres holds findings + catalog

Tools

  • • FastMCP exposes deterministic tools
  • • cryptography signs every finding

Audit

  • • OpenTelemetry traces every action
  • • structlog JSON audit trail