CALDERA vs RedAmon
GitHub Stats
About CALDERA
CALDERA is MITRE's open-source adversary emulation platform that automates attack simulations based on the ATT&CK framework. It enables red teams and purple teams to run realistic, repeatable attack chains against their infrastructure without manually executing each technique. CALDERA uses an agent-based architecture where lightweight agents (called Sandcat) are deployed on target systems and execute adversary profiles — curated sequences of ATT&CK techniques that mimic real-world threat actors. The platform includes dozens of pre-built abilities covering reconnaissance, credential access, lateral movement, persistence, and exfiltration. Blue teams can use CALDERA to validate detection coverage by running known attack sequences and checking whether their SIEM, EDR, and monitoring tools triggered appropriate alerts. The web-based UI provides real-time visibility into operation progress and a reporting engine for gap analysis.
About RedAmon
RedAmon is an AI-powered red team automation framework that uses LangGraph for agent orchestration and Neo4j for attack path knowledge graphs. It integrates 70+ security tools and automates the full attack lifecycle from passive reconnaissance through active exploitation. Unique features include automatic fix PR generation for discovered vulnerabilities, configurable engagement scope, and detailed attack narratives that explain each step taken. Useful for continuous red team operations where human operators define scope and the AI executes.
Platform Support
Tags
Shared
CALDERA only
RedAmon only