FestIn logo

FestIn

The powered S3 bucket finder — now with a monitoring dashboard

FestIn finds exposed S3 buckets tied to your domains and, since the 0.3 release, ships a multi-project, multi-user monitoring dashboard that watches them continuously: scheduled rescans, persisted findings, an exposure trend chart and a REST API — in an industrial ops-console UI.

Component	What it does
`festin scan`	Crawler + DNS discovery + bucket permutations + multi-cloud probing + secret detection. SARIF/CSV/JSONL export, Tor support, checkpoint/resume.
`festin serve`	Dashboard on `http://localhost:8420`: projects, scans, findings, scheduled scans, users with JWT auth.

What's new in 0.3

Monitoring dashboard (festin-serve): multi-project (organize domains into projects), multi-user (JWT + admin/viewer roles), scheduled scans, full REST API.
Scan results persisted as real rows — buckets and findings are queryable, not just counters.
Exposure trend — a data-generated headline chart: is your exposure going up or down over 14 days?
Ops-console UI — vanilla-JS SPA, no build step, dark industrial design.
Docker image on Docker Hub: cr0hn/festin.

Full changelog in the documentation.

Quick start

# scanner: one-shot audit
uvx festin scan example.com --permute --export sarif --output findings.sarif

# dashboard: continuous monitoring
uvx festin-serve --port 8420
# open http://127.0.0.1:8420 — the first account you register becomes admin

Or with Docker:

docker run -d --name festin \
  -p 8420:8420 \
  -e FESTIN_JWT_SECRET="$(python3 -c 'import secrets; print(secrets.token_urlsafe(32))')" \
  -v festin-data:/data \
  cr0hn/festin:latest

More install options (pip, uv, dev setup) in the installation guide.

Documentation

Everything lives in the MkDocs Material site — installation, tutorials, scanner CLI reference, dashboard tour, REST API, configuration, Docker/Kubernetes/HA deployment, security hardening and a runbook:

Read the documentation →

Topic	Link
Tutorial: scanner	usage/tutorial-scanner
Tutorial: dashboard	usage/dashboard-tutorial
REST API	usage/api
Production (Docker/K8s/HA)	deploy
Runbook & troubleshooting	reference/runbook

Build it locally:

uv sync --group docs
uv run mkdocs serve    # http://localhost:8000

Development

git clone https://github.com/cr0hn/festin.git && cd festin
uv sync --group dev
timeout 130 uv run pytest --timeout=30 -q    # 305 tests — always with the timeout

Contribution rules, complexity gates and verification checklist: reference/development.

License

Free for personal and professional use; hosted or paid services and commercial redistribution require a separate agreement with the author. See LICENSE.

Metadata

Release files for festin 0.2.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for festin 0.2.0
File	Size	Uploaded
festin-0.2.0.tar.gz	6.7 MB	Sep 7, 2026	Details

Built distribution (wheel)

Table of built distributions (wheels) for festin 0.2.0
File	Interpreter	ABI	Platform	Reset
festin-0.2.0-py3-none-any.whl 91.5 kB Sep 7, 2026	Python 3	none	any	Details

Total release size: 6.8 MB

Release files / festin-0.2.0.tar.gz

Download URL	festin-0.2.0.tar.gz
Size	6.7 MB
Tags	Source
SHA-256 checksum How to use checksums	`55615b8acf578890b53bbdd7b01b0a525a4164219d2961f2b6d67832b8e1385c`
BLAKE2b-256 checksum How to use checksums	`f9563d8f83f752514d2fab0207163806dc4296cb8df6f74884b127aac10144a1`
Upload date	Sep 7, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/7.0.0 CPython/3.13.14`

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/cr0hn/festin
Publishing commit: github.com/cr0hn/festin/tree/f001e994490a94ef0ed38c28b6fcd20e417f0ae8

Workflow

Publishing configuration: github.com/cr0hn/festin/blob/f001e994490a94ef0ed38c28b6fcd20e417f0ae8/.github/workflows/ci.yml
Publishing logs: github.com/cr0hn/festin/actions/runs/34120827305/attempts/1

Artifact

Subject: festin-0.2.0.tar.gz
SHA-256 checksum: 55615b8acf578890b53bbdd7b01b0a525a4164219d2961f2b6d67832b8e1385c Verifying attestations

Release files / festin-0.2.0-py3-none-any.whl

Download URL	festin-0.2.0-py3-none-any.whl
Size	91.5 kB
Tags	Python 3
SHA-256 checksum How to use checksums	`5f912109b0d52bfcebf8f29c2353110222b2b16ec28f432f3cd80efc2c888056`
BLAKE2b-256 checksum How to use checksums	`58f23b903ef51565b0a01b58fe686bea4762aa340233277177dbb45acf71a4ed`
Upload date	Sep 7, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/7.0.0 CPython/3.13.14`

Provenance

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/cr0hn/festin
Publishing commit: github.com/cr0hn/festin/tree/f001e994490a94ef0ed38c28b6fcd20e417f0ae8

Workflow

Publishing configuration: github.com/cr0hn/festin/blob/f001e994490a94ef0ed38c28b6fcd20e417f0ae8/.github/workflows/ci.yml
Publishing logs: github.com/cr0hn/festin/actions/runs/34120827305/attempts/1

Artifact

Subject: festin-0.2.0-py3-none-any.whl
SHA-256 checksum: 5f912109b0d52bfcebf8f29c2353110222b2b16ec28f432f3cd80efc2c888056 Verifying attestations