ROADMAP.md

Kexa ROADMAP

Engine

• AddOn logical
• Feedback on used rules
• Use only required addOn present in rules
• Cross-platform logger
• External key manager
  • Azure key vault
  • AWS secret manager
  • Hashicorp vault
  • Google secret manager
  • Bitwarden
• External rules importation
• Github action with docker

Providers

• Azure
  • Custom display for specific resources
  • Auto gathering all item in
• AWS
  • Custom display for specific resources
  • Auto gathering all item in
• GCP
  • Custom display for specific resources
  • Collect all main used item
  • Auto gathering all item in
• Github
  • Custom display for specific resources
  • Collect all main used item
• Kubernetes
  • Custom display for specific resources
  • Collect all main used item
  • Auto gathering all item in
• Helm
  • Custom display for specific resources
  • Collect all main used item
• All endPoint http(s)
  • Custom display for specific resources
  • Collect all main used item
• Google workspace
  • Custom display for specific resources
  • Collect all main used item
• O365
  • Custom display for specific resources
  • Collect all meaning item
• Gitlab
  • Collect all meaning item
• OVH
  • Collect all meaning item
• Database
  • PostgreSQL
    • Collect all meaning item
    • CIS security rules
  • MySQL/MariaDB
    • Collect all meaning item
    • CIS security rules
  • Oracle
    • Collect all meaning item
    • CIS security rules
  • MongoDB
    • Collect all meaning item
    • CIS security rules
• SSH
  • Collect system configuration
  • CIS security rules

Output

• Notification
  • For each non-compliant resource
    • Email
    • SMS
    • Teams
    • webhook
    • Jira
    • Slack
  • For each set of rules
    • Email
    • SMS
    • Teams
    • webhook
    • Jira
    • Slack
• Export data scanned
  • Azure blob storage
  • Mongo DB
  • MySQL
  • Amazon Simple Storage Service (S3)
  • Cloud Storage (GCP)
• Save result of scan
  • Azure blob storage
  • Mongo DB
  • MySQL
  • Postgres
  • Amazon Simple Storage Service (S3)
  • Cloud Storage (GCP)

Maintenance

• Auto Update
  • Linux
  • Windows

Rules

• Set of rules for each of our provider: daily use
• CIS Benchmarks
  • Azure
  • AWS
  • O365
  • Google workspace
  • HTTP
  • Github
  • GCP
  • Kubernetes

Tiers

• SaaS
  • rules catalog
    • API
    • Web site
  • history and graphics
  • graphic rule editor
• AddOn Grafana
• Kubernetes Operator

See the open issues for a full list of proposed features (and known issues).