Shuffle is an automation platform to unify your security services (SOAR). It has thousands of premade integrations and is based on open frameworks like OpenAPI and Mitre Att&ck. The workflow editor is based on a no-code thought process to empower non-developers, and the app creator makes you able to integrate any platform in minutes.
- Self-hosted: Check out the installation guide
- Cloud: Register at https://shuffler.io/register and get cooking (missing a lot of features)
Please consider sponsoring the project if you want to see more rapid development.
- 1. Introducing Shuffle
- 2. Getting started with Shuffle
- 3. Integrating Shuffle with Virustotal and TheHive
- 4. Real-time executions with TheHive, Cortex and MISP
Documentation can be found on https://shuffler.io/docs and is written in https://github.com/frikky/shuffle-docs.
- Apps: https://github.com/frikky/shuffle-apps
- Workflows: https://github.com/frikky/shuffle-workflows
- Security OpenAPI apps: https://github.com/frikky/security-openapis
- Documentation: https://github.com/frikky/shuffle-docs
- Simple workflow automation editor
- Premade apps for a number of security tools
- App creator for OpenAPI
- Easy to learn Python library for custom apps
All modular information related to Shuffle will be under MIT (anyone can use it for whatever purpose), with Shuffle itself using AGPLv3.
Apps & App SDK: MIT Shuffle backend: AGPLv3
Below is the folder structure with a short explanation
├── README.md # What you're reading right now
├── backend # Contains backend related code.
│ ├── go-app # The backend golang webserver
│ ├── app_gen # Code for app generation outside the Shuffle platform
│ └── app_sdk # The SDK used for apps
├── frontend # Contains frontend code. ReactJS and cytoscape. Horrible code :)
├── functions # Contains google cloud function code mainly.
│ ├── static_baseline.py # Static code used by stitcher.go to generate code
│ ├── stitcher.go # Attempts to stitch together an app - part of backend now
│ ├── onprem # Code for onprem solutions
│ │ ├── Orborus # Distributes execution locations
│ │ ├── Worker # Runs a workflow
└ docker-compose.yml # Used for deployments
It's in BETA - Get in touch, send a mail to frikky@shuffler.io or poke me on twitter @frikkylikeme