Cashel — Firewall Compliance License

🔥 CASHEL — Firewall Configuration AuditorBuilt by a network security engineer, for network security engineers.Cashel audits firewall configurations and finds what your change process misses — overly permissive rules, missing deny-alls, insecure services, and more. Get a scored, categorized report with remediation guidance in seconds.Supported Vendors AWS Security Groups (JSON) Azure NSG (JSON) Cisco (text) Fortinet (text) Palo Alto Networks (XML) pfSense (XML) Free Features (Open Source) Web UI — browser-based, no terminal required Auto-detect vendor — identifies vendor from file content automatically Security scoring — every audit produces a 0–100 score: 100 − (HIGH × 10) − (MEDIUM × 3) Category badges — findings tagged by type: Exposure, Protocol, Logging, Hygiene, Redundancy Remediation guidance — every finding includes a plain-English fix Device tag system — name your devices (e.g. ASA01, FortiGate-HQ) for auto-versioned history tracking Score Trends chart — visualize security score over time per device with vendor and tag filters Live SSH connection — pull and audit a running config directly from Cisco, Fortinet, or Palo Alto devices Rule change diff — upload two configs of the same vendor to see exactly what was added, removed, and unchanged Audit History — browse saved audits with vendor filter, sort, and device search Archival reviews — compare any two saved audits: resolved findings, new issues, and delta scores Activity Log — full record of every audit, SSH attempt, and config diff, including failures PDF report export — color-coded findings with score box, category labels, and remediation text Light / dark / auto theme Docker Compose deployment — up in minutes CLI support Checks include: any/any permit rules, missing deny-all, permit rules missing logging, redundant/shadowed rules, Telnet management, unrestricted ICMP, any-application rules (Palo Alto), missing security profiles, disabled/unnamed/all-service policies (Fortinet), internet-facing policies missing UTM, WAN-facing any-source rules (pfSense), open ingress to 0.0.0.0/0 (AWS), default SGs with active rules, broad port ranges, inbound Any rules (Azure), and more.Paid License — Compliance ChecksUnlock framework-mapped compliance checks with specific control references: CIS Benchmark — Cisco, Palo Alto, Fortinet, pfSense PCI-DSS — with requirement numbers (e.g. PCI Req 1.3, Req 10.2) NIST SP 800-41 — with control references (e.g. NIST AC-6) Compliance findings appear in both the web UI and PDF report, clearly separated from standard audit findings.Getting StartedDocker Compose (recommended):git clone https://github.com/Shamrock13/cashel.git cd cashel docker compose up --build Open http://localhost:8080 — that's it.Cashel is open source (MIT). The compliance module requires a paid license key, activated via the web UI or CLI.

Found on Devadex — the discovery index for independent software the big search engines bury. More from gumroad.

Report this listing