Personalized, user-focused recommendations for employee information security.
Alternatives To Stethoscope
Project NameStarsDownloadsRepos Using ThisPackages Using ThisMost Recent CommitTotal ReleasesLatest ReleaseOpen IssuesLicenseLanguage
Portainer25,6961a day ago78April 21, 20211,134zlibGo
Making Docker and Kubernetes management easy.
Trivy17,61525a day ago176September 16, 2022180apache-2.0Go
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
2 days ago160apache-2.0Go
Slim(toolkit): Don't change anything in your container image and minify it by up to 30x (and for compiled languages even more) making it secure too! (free and open source)
Authelia16,5211a day ago34September 19, 202298apache-2.0Go
The Single Sign-On Multi-Factor portal for web apps
Hydra14,093821 hours ago1May 08, 201978apache-2.0Go
OpenID Certified™ OpenID Connect and OAuth Provider written in Go - cloud native, security-first, open source API security for your infrastructure. SDKs for any language. Works with Hardware Security Modules. Compatible with MITREid.
6 days ago141apache-2.0PHP
This is a collection of tutorials for learning how to use Docker with various tools. Contributions welcome.
12 days ago17April 27, 2022127gpl-3.0Rust
🤖 The Modern Port Scanner 🤖
Docker Bench Security8,377
4 days ago14apache-2.0Shell
The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.
6 days ago112August 22, 202270mitGo
Fast and secure standalone server for resizing and converting remote images
Devops Resources6,995
9 days ago13Groovy
DevOps resources - Linux, Jenkins, AWS, SRE, Prometheus, Docker, Python, Ansible, Git, Kubernetes, Terraform, OpenStack, SQL, NoSQL, Azure, GCP
Alternatives To Stethoscope
Select To Compare

Alternative Project Comparisons

Stethoscope: User-Focused Security

Giraffe logo

Stethoscope is a web application that collects information from existing device data sources (e.g., JAMF or LANDESK) on a given user’s devices and gives them clear and specific recommendations for securing their systems. An overview is available on the Netflix Tech Blog.

Join the chat at Apache 2.0 NetflixOSS Lifecycle Build Status

Stethoscope screenshot


If you have node (version 6.4+) and npm (included with node) installed already and just want to play around with the front end, run:

make install-develop-ui

What is Stethoscope?

Main Features

  • Retrieves device information from:
    • JAMF
    • G Suite (Google) Mobile Management
    • bitFit
  • Evaluates status of various security practices, including:
    • Disk encryption
    • Firewall
    • Screen saver lock/password
    • Operating system up-to-date
    • Operating system auto-update
    • Not jailbroken/rooted
    • Software presence (e.g., for monitoring tools)
  • Merges associated device records
  • Plugin architecture:
    • Easy to add data sources, practices, and other components
    • Examples and base plugins for communicating with Elasticsearch and HTTP REST APIs

Getting Started

Stethoscope consists of two primary pieces: a Python-based back-end and a React-based front-end. Nginx is used to serve static files and route traffic to the back-end.

The easiest way to get up-and-running quickly is through the provided Docker configuration.


To run with Docker, first install Docker (standard or beta).

We have provided a Docker Compose file, docker-compose.yml, that defines the services that make up Stethoscope. To start these services, run:

docker-compose up

Then connect to the main Nginx web server at http://localhost:5000.


If you encounter the following error, you likely need to upgrade docker-compose to version 1.10 or higher.

ERROR: In file './docker-compose.yml' service 'version' doesn't have any configuration options. All top level keys in your docker-compose.yml must map to a dictionary of configuration options.

Next Steps

Our full documentation is available at


Copyright 2016, 2017 Netflix, Inc.

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

Popular Security Projects
Popular Docker Projects
Popular Security Categories
Related Searches

Get A Weekly Email With Trending Projects For These Categories
No Spam. Unsubscribe easily at any time.