j3ssie/osmedeus

What it solves

Osmedeus is a security orchestration engine designed to automate complex security workflows and reconnaissance tasks. It replaces manual, fragmented security scanning processes with a unified, auditable system for managing assets, vulnerabilities, and distributed execution across various environments.

How it works

The engine uses a declarative YAML-based approach to define pipelines. These workflows include hooks, conditional branching, and decision routing. Execution is handled by a a Redis-based master-worker pattern, allowing tasks to be distributed across host, Docker, or SSH runners. It integrates with cloud providers (AWS, GCP, Azure, DigitalOcean, Linode) to provision infrastructure for scans and provides a rich library of over 80 utility functions for tasks like nmap integration and SARIF parsing.

Who it’s for

It is built for security professionals, penetration testers, and researchers who need to automate their reconnaissance and vulnerability scanning at scale, from beginners to experts.

Highlights

• Agentic LLM Integration: Supports tool-calling agent loops with memory management and orchestration of sub-agents, as well as ACP subprocess agents like Claude Code and Gemini.
• Distributed Execution: Uses a Redis queue system for distributed task processing and file synchronization across workers.
• Cloud-Native Infrastructure: Automatically provisions and cleans up scan infrastructure across multiple major cloud providers.
• Event-Driven Scheduling: Supports cron, file-watch, and event triggers with deduplication and delayed task queues.
• Comprehensive Tooling: Includes a REST API, Web UI for visualization, and a powerful CLI for database queries and workflow linting.