Skip to content
SAF Apps

saf Vulcan

Vulcan is MITRE SAF™'s security guidance authoring platform. Create, edit, and collaborate on security requirements documents, align content to source guidance, and generate InSpec test profiles directly from your baselines.
Baseline Editing

Develop Baselines in a User-Friendly Editing Window

Construct your baselines in a simple but feature-rich editing view. Use Vulcan's sorting and filtering features to quickly search through your controls.
Vulcan editing interface with controls
Source Alignment

Align Your Content Back To Source Guidance

Import your high-level requirements into Vulcan and use them as the direct template for your baseline content. Start with general guidance and tailor it to your component.
Vulcan aligning content to source guidance
Collaboration

Streamline Baseline Creation In A Collaborative Environment

Vulcan supports a distributed model of baseline development in which multiple authors collaborate to produce high-quality content. Use Vulcan's change control, peer review and role-based permissions to keep all of your authors working from the same sheet of music. Avoid the mental overhead of managing your document versions manually.
Vulcan collaborative features
InSpec Integration

Develop Automated Tests For Your Content

Vulcan includes an InSpec testing framework integration to allow authors to write automated tests alongside their human-readable baselines. Vulcan pre-populates the tests with metadata from the original baselines to keep your test profiles tightly bound to the guidance from which they were written.
Vulcan InSpec test development
Get Started

Deployment Options

Choose the deployment option that works best for your organization's security guidance authoring requirements. Vulcan can be deployed as a containerized service or built from source.

Container Deployment

Deploy Vulcan as a containerized application using Docker or Kubernetes. Use our Helm chart for simplified Kubernetes deployment, or pull the Docker image directly from DockerHub for container orchestration.

From Source

Build and deploy Vulcan from source code for development or custom deployments. Clone the repository, install dependencies, and run locally or deploy to your own infrastructure.

MITRE Security Automation Framework (MITRE SAF) is a trademark of The MITRE Corporation. Released under the Apache 2.0 License.