AsterionDocumentation v0.4.1

Asterion Documentation

Distributed open-port and service monitoring: what is really reachable on your hosts, networks and domains, seen from several places at once.

Asterion has two parts:

  • Polaris is the central portal. It stores what was found, correlates it into hosts, keeps the history, judges it against your exposure policy, raises findings and notifies you. It runs as a Docker Compose stack with MariaDB.
  • Pulsar is the satellite. It is a small container you start wherever you want to look from: a cloud VM, the office LAN, a branch. It downloads its test plans from Polaris, runs the checks (nmap, ping, traceroute, HTTP(S), TLS, SMTP, FTP, DNS, …) on its own schedule and uploads the results.
An Asterion installation: the Polaris stack, satellites anywhere, and the public services Polaris asks.
An Asterion installation: the Polaris stack, satellites anywhere, and the public services Polaris asks.

Every satellite sees your systems from where it stands. A port that the office satellite reaches but the cloud satellite does not is not exposed to the internet; the reverse is a finding. That comparison is the core of Asterion.

The Polaris dashboard with the map of satellites and hosts, recent changes and runs.
The Polaris dashboard with the map of satellites and hosts, recent changes and runs.

Where to start

This documentation belongs to the Asterion release shown at the top of the page. Each release of Asterion comes with a documentation image of the same version.