Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Antaeus serves as a semantic policy engine designed for developers tasked with assessing human-written rules related to language, context, intent, or exceptions. It features an open-source core built in Go and a command-line interface that can load policy artifacts in YAML or JSON formats, validating these against versioned schemas while executing named regression tests. The evaluation process yields clear outcomes such as allow, review, deny, or failure, accompanied by policy identification and evidence for the decisions made, while leaving the responsibilities of authentication, authorization, and any consequential actions to the application itself. Developers have the option to operate a deterministic, credential-free local workflow or utilize an experimental hosted dashboard and API for managing policies and evaluating various inputs. Additionally, there is an experimental OpenAI evaluator available for use. It is important to note that Antaeus is still in its early stages; thus, the capacity of the hosted service is limited and does not come with a production-level service level agreement (SLA), which may affect reliability during high-demand situations.
Description
Threagile empowers teams to implement Agile Threat Modeling with remarkable ease, seamlessly integrating into DevSecOps workflows. This open-source toolkit allows users to represent an architecture and its assets in a flexible, declarative manner using a YAML file, which can be edited directly within an IDE or any YAML-compatible editor. When the Threagile toolkit is executed, it processes a series of risk rules that perform security evaluations on the architecture model, generating a comprehensive report detailing potential vulnerabilities and suggested mitigation strategies. Additionally, visually appealing data-flow diagrams are automatically produced, along with various output formats such as Excel and JSON for further analysis. The tool also supports ongoing risk management directly within the Threagile YAML model file, enabling teams to track their progress on risk mitigation effectively. Threagile can be operated through the command line, and for added convenience, a Docker container is available, or it can be set up as a REST server for broader accessibility. This versatility ensures that teams can choose the deployment method that best fits their development environment.
API Access
Has API
Yes
API Access
Has API
No
Screenshots View All
No images available
Pricing Details
Free
The local Go engine is available under the Apache-2.0 license at no charge. Hosted usage includes a shared free allowance of up to 100 completed decisions per day, subject to shared capacity and without a production SLA. Paid usage is available through credit purchases starting at $10; hosted evaluation charges are usage-based.
Free Trial
No
Free Version
Yes
Pricing Details
Free
Free Trial
No
Free Version
Yes
Deployment
Web-Based
Yes
On-Premises
Yes
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
Yes
Linux
Yes
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Types of Training
Training Docs
No
Webinars
No
Live Training (Online)
No
In Person
No
Vendor Details
Company Name
Antaeus
Website
antaeus.io
Vendor Details
Company Name
Threagile
Website
threagile.io
Product Features
Business Rules Management Systems (BRMS)
Access Control / Permissions
No
Code Development Environment
No
Deploy Across Platforms
No
Flexible Hosting Options
No
Lifecycle Management
No
No Code Development
No
Simulation
No
Validation Tools
No