Puma Security's Amaroq Engine is a vulnerability aggregation and correlation engine for network and product security tools. Amaroq ingests raw scan output, normalizes the data to a SARIF format, performs differential analysis, and suppresses false positives.
The Amaroq installation and user guide can be found on the GitHub Wiki.
Puma Security's Amaroq is licensed under the Mozilla Public License (MPL) version 2.0.
Contributions are welcome. Fork the Amaroq repository send us a pull request!
- Eric Johnson - Principal Security Engineer, Puma Security
- Eric Mead - Principal Security Engineer, Puma Security
- Andrew Guggenberger - Senior Security Engineer, Puma Security