Aloo is currently in active development. The v0.1.0 network scanning engine is complete. See the Roadmap for upcoming SQLite history and vulnerability mapping features!
Aloo is an enterprise-grade platform designed to continuously discover, inventory, analyze, correlate, and explain network infrastructure.
Unlike traditional port scanners that simply tell you "Port 22 is open", Aloo answers:
- "What changed since yesterday?"
- "What are the risks?"
- "What devices are related?"
- "What should I fix first?"
Built in 100% safe Rust, Aloo combines the raw speed of Masscan/ZMap with the analytical depth of Nmap and the continuous asset tracking of enterprise EDR solutions.
- ⏱️ Asset Timeline: Every discovered device keeps history forever. Track when ports open, services change, or certificates expire.
- 🕸️ Infrastructure Graph: Automatically infer and build a relationship graph between your routers, load balancers, and web servers based on network telemetry.
- 🧠 Risk Correlation: Correlates weak TLS, exposed ports, and outdated service banners to prioritize findings.
- 🔄 Change Detection (Diff Engine): Instantly diff two scans to find newly exposed endpoints or retired hardware.
- 🔌 Extensible Plugin System: Write custom L7 probes and risk correlators in Rust or WebAssembly (Wasm).
Aloo requires Rust 1.82+. Install it globally on your machine using Cargo:
cargo install aloo-cli# Run a blazing fast scan against the top 1024 ports
aloo scan --profile quick scanme.nmap.org
# Scan an entire local subnet with rate limits
aloo scan -r 5000 -j 2000 192.168.1.0/24Aloo is a highly concurrent, event-driven system built on tokio and sqlx. It uses a Hexagonal Architecture across a 19-crate workspace to ensure every component (scanning, storage, diffing, AI generation) is modular and independently testable.
Read our full Architecture Blueprint to see how the Engine, Event Bus, and SQLite WAL storage fit together.
- Phase 1: The Foundation - Workspace, Domain models, Storage interfaces.
- Phase 2: The Network Engine - Tokio JoinSet concurrency, DNS resolution, TCP connect scanning, Global rate limiter.
- Phase 3: The Intelligence Engine - Banner grabbing, TLS inspection, CVE mapping.
- Phase 4: The Time Machine - SQLite schema, Diff Engine, Asset Timeline.
- Phase 5: The Enterprise Layer - Infrastructure Graph, AI Extension points, REST API, Plugins.
We want Aloo to become one of the most impressive Rust cybersecurity tools on GitHub, and we need your help!
Whether you are fixing bugs, adding new L7 protocol probes, or improving documentation, all contributions are welcome.
- Read the Contributing Guide to learn how to set up your dev environment.
- Check out the Good First Issues to find something to work on.
- Review our Code of Conduct.
If you find a security vulnerability within Aloo, please refer to our Security Policy for reporting instructions.
Aloo is dual-licensed under either the MIT License or the Apache License, Version 2.0, at your option.