Plugins & Agents
No two security programs are identical. The core stays small, and everything else hangs off it as a plugin you can add, swap, or write yourself.
A lean core, everything else a plugin
No two security programs are identical, so Kestrel does not pretend otherwise. The core stays small, and everything else hangs off it as a plugin you can add, swap, or write yourself.
Agents come in several runtimes to match your test estate, interfaces adapt to how your team works, and custom ability collections let you encode the exact behaviors you care about.
- Multiple agent runtimes. Choose Go, PowerShell, or Python agents to match the hosts you are testing.
- Custom TTP libraries. Package your own abilities and profiles into reusable, shareable plugins.
- Open architecture. Every plugin talks to the same documented core API — nothing is a black box.
Pull what you need from 40+ plugins.
A sample of what the community and core team maintain.
Extend it without fighting it.
Lightweight footprint
Agents are small, configurable, and built to leave a clean, testable trail.
Community plugins
Pull from a catalog of 40+ plugins or contribute your own back.
Stable contracts
Build against a versioned API that will not shift under your integrations.
Where to go next
Build Kestrel around your program.
Add the agents, exporters, and ability packs you need — or write your own against a documented, stable API.