MITRE Caldera

MITRE Caldera is a platform for automating adversary emulation, running authorized red team exercises, and scripting incident response. Built on the MITRE ATT&CK framework, it centers on an asynchronous control server driven through a web interface.

A REST API and plugin model extend the core with agents, reporting, reusable TTP collections, OT capabilities, ATT&CK visualizations, incident response, and simulated endpoint noise. The Magma UI provides the v5 front end for building and launching operations.

It runs on Linux or macOS with Python 3.10+ and can be started in Docker, including a self-contained variant for air-gapped networks. Originally from MITRE, it has moved to the Apache Software Foundation as Apache Caldera (Incubating).