Vajra: Building an Open-Source Unified Cybersecurity Platform

Cybersecurity tools are often fragmented across endpoint monitoring, vulnerability management, network security, threat detection and compliance. This creates complexity for organizations that need a practical security platform but cannot afford or deploy multiple proprietary products.

Vajra is an open-source unified cybersecurity platform that brings these capabilities together in a single platform. It combines endpoint and device management, vulnerability management, network security, threat detection and response, and regulatory compliance automation.

Vajra is built using FOSS components and extends them to provide deeper visibility across Linux and Windows systems. Its lightweight agents collect system and security telemetry, while additional capabilities such as agentless vulnerability and network discovery allow organizations to assess systems without installing an agent everywhere.

The project is now being prepared for open-source release, with the goal of making the platform accessible to government organizations, MSMEs, startups, researchers and the wider security community.

This talk will introduce the architecture and motivation behind Vajra, explain how its major components work together, and discuss our experience building a cybersecurity platform using FOSS technologies. We will also cover the challenges of combining endpoint telemetry, vulnerability assessment, network visibility and threat detection into one platform, and what we hope to achieve by opening the project to the community.

The session will conclude with the project's roadmap and opportunities for developers and security practitioners to contribute.

• Understand the architecture of Vajra and how endpoint, vulnerability, network security and threat detection fit together.

• Learn how FOSS technologies such as osquery and eBPF can be used and extended to build practical cybersecurity tools.

• Understand how security telemetry is collected, correlated and turned into actionable security information.

• Explore both agent-based and agentless approaches to gaining visibility across systems and networks.

• Get an overview of how modern cybersecurity platforms are designed to support different environments, from individual systems and labs to large-scale deployments.

• Learn about Vajra's open-source roadmap and how developers, researchers and the wider community can contribute.