Introduction
InfraWard is an infrastructure inventory that maintains itself. Enrol a server with one command and InfraWard discovers what runs on it (Proxmox virtual machines and containers, Docker containers, Plesk sites…), finds its vulnerabilities and ranks them by real risk, and keeps the inventory up to date with no manual work.
Who it is for
Section titled “Who it is for”Teams and administrators who run their own servers and want to know at all times what is deployed, what is exposed and what is affected by each vulnerability, without relying on a third-party service. InfraWard is self-hosted: it runs on your infrastructure and your data never leaves it.
What it does
Section titled “What it does”- One-step server enrolment, with a read-only inventory user and host key fingerprints pinned from the start.
- Recursive discovery of Proxmox, Docker and Plesk, with relationships between assets and a topology view.
- Vulnerabilities and SBOMs with Trivy, re-evaluation of stored SBOMs and CVE search.
- Prioritisation with CISA KEV, EPSS, noise reduction and service context.
- Automatic reconciliation with snapshot history.
- Domain inventory: Cloudflare, RDAP, TLS certificates, dangling DNS records and the path from each domain to its service.
- Web terminal with short-lived SSH certificates and per-asset, tag or project permissions.
- A separate credential vault the worker cannot read.
- Users, roles and auditing, with local or OIDC login and TOTP MFA.
- Projects, tags, filter search, bulk operations and customisable dashboards.
Planned
Section titled “Planned”Terminal session recording, an SSH gateway for native ssh, a Vaultwarden provider and per-site remote workers.
Licence
Section titled “Licence”InfraWard is released under the GNU Affero General Public License v3.0. If you offer a modified version as a network service, you must make its source code available to its users.
Next steps
Section titled “Next steps”- Concepts and architecture: the services that make up InfraWard and how they share the work.
- Installation: coming soon.
- Configuration: the main environment variables.
- Security: security model and how to report a vulnerability.