Keystone modules
16 modules in the public catalog. Customers sign in to download them.
16 modules
- Cloud accounts (AWS, Azure) Read an AWS account's or an Azure subscription's security settings over the providers' APIs, from a queue worker, as rows compliance checks read.
- Containers (agent) Watch the containers on a Linux host through its Keystone agent: for each container under Docker or Podman, whether it is running, its CPU, memory against its limit, network traffic, restarts and uptime, as metrics on a schedule; and a list of the containers with their image, state and health.
- EJBCA Certificate Authority EJBCA (Keyfactor) as this organization's certificate authority, over its REST API. Implements pki.certificate.enroll@1, pki.chain.get@1 and pki.certificate.revoke@1 — bind them here in place of the stub CA, and enrollment, renewal and revocation go to EJBCA. Revocation is real.
- HTTP & API checks Checks web endpoints and APIs from a queue worker: whether each answers with the status you expect, how long it took, whether the body holds a phrase or a JSON field holds a value, and how many days its TLS certificate has left.
- Kubernetes clusters Watch a Kubernetes cluster through its API server, from a queue worker: node readiness and pressure, pods pending, failed or not ready and how often they restart, and deployments, stateful sets and daemon sets with fewer replicas ready than wanted, as metrics on a schedule; CPU and memory use of…
- Linux (agent) Manage Debian/Ubuntu, RHEL-family and SUSE hosts through their Keystone agent. Patching: assess pending updates, report each host's patch state and the repositories it reads, start patching detached (it keeps running on its own), check it finished; then reboot only if required and verify the host.
- Network Discovery Connect-scans groupings of hosts over TCP and reports which ports answer. Each grouping carries its own addresses and its own port list.
- Network devices (CLI) Read a router's or switch's configuration over SSH from a queue worker, through the device's SSH system connection, and report its security settings as rows compliance checks read: password encryption, AAA, SSH version and vty transport, telnet and HTTP servers, remote logging, NTP, SNMP…
- SNMP polling Poll switches, routers, firewalls, servers, UPSs and printers over SNMP v1, v2c or v3 from a queue worker: whether each answers and its uptime, per-interface traffic, errors, discards, status and speed, and CPU and memory where the device implements HOST-RESOURCES-MIB, as metrics on a schedule;…
- SNMP trap listener Receives SNMP traps on an agent near the devices — v1, v2c and v3 (authNoPriv and authPriv, AES) — and sends each to an event source of type SNMP traps, which records external.snmp.link_down, .link_up, .restart, .auth_failure and .trap. A service: the agent opens UDP 162 and keeps it running.
- SQL databases (connector) A data source connector for SQL databases — PostgreSQL, MySQL or MariaDB, SQL Server — run on a queue worker, so it reaches a database inside the worker's network.
- Syslog listener (TCP, TLS) Receives syslog (RFC 3164 and RFC 5424 over TCP — octet-counted or newline-framed — and over TLS with optional client certificates (RFC 5425)) on an agent near the senders, keeps only the lines worth an event — authentication failures, interface changes, configuration changes and critical…
- Syslog listener (UDP) Receives syslog (RFC 3164 and RFC 5424 over UDP) on an agent near the senders, keeps only the lines worth an event — authentication failures, interface changes, configuration changes and critical severities by default — and sends them to an event source of type Syslog, which records…
- TLS Network Discovery Handshakes every endpoint at TLS 1.1, 1.2 and 1.3 and records the key exchange it agrees on (ML-KEM hybrids included), every group it accepts, and every certificate presented: key and signature algorithms (hybrid and post-quantum included), key sizes, key usage and extended key usage, key…
- Windows (agent) Run a Windows host through its Keystone agent.
- macOS (agent) Monitor Macs through their Keystone agent. Monitoring: CPU, load, uptime, memory, swap and volume capacity and use, as metrics on a schedule — under the same series names as the Linux and Windows modules, so one dashboard and one set of alert rules cover a mixed fleet.
No modules match . Show all modules