FestIn logo

FestIn

The powered S3 bucket finder — now with a monitoring dashboard

FestIn finds exposed S3 buckets tied to your domains and, since the 0.3 release, ships a multi-project, multi-user monitoring dashboard that watches them continuously: scheduled rescans, persisted findings, an exposure trend chart and a REST API — in an industrial ops-console UI.

Component	What it does
`festin scan`	Crawler + DNS discovery + bucket permutations + multi-cloud probing + secret detection. SARIF/CSV/JSONL export, Tor support, checkpoint/resume.
`festin serve`	Dashboard on `http://localhost:8420`: projects, scans, findings, scheduled scans, users with JWT auth.

What's new in 0.3

Monitoring dashboard (festin-serve): multi-project (organize domains into projects), multi-user (JWT + admin/viewer roles), scheduled scans, full REST API.
Scan results persisted as real rows — buckets and findings are queryable, not just counters.
Exposure trend — a data-generated headline chart: is your exposure going up or down over 14 days?
Ops-console UI — vanilla-JS SPA, no build step, dark industrial design.
Docker image on Docker Hub: cr0hn/festin.

Full changelog in the documentation.

Quick start

# scanner: one-shot audit
uvx festin scan example.com --permute --export sarif --output findings.sarif

# dashboard: continuous monitoring
uvx festin-serve --port 8420
# open http://127.0.0.1:8420 — the first account you register becomes admin

Or with Docker:

docker run -d --name festin \
  -p 8420:8420 \
  -e FESTIN_JWT_SECRET="$(python3 -c 'import secrets; print(secrets.token_urlsafe(32))')" \
  -v festin-data:/data \
  cr0hn/festin:latest

More install options (pip, uv, dev setup) in the installation guide.

Documentation

Everything lives in the MkDocs Material site — installation, tutorials, scanner CLI reference, dashboard tour, REST API, configuration, Docker/Kubernetes/HA deployment, security hardening and a runbook:

Read the documentation →

Topic	Link
Tutorial: scanner	usage/tutorial-scanner
Tutorial: dashboard	usage/dashboard-tutorial
REST API	usage/api
Production (Docker/K8s/HA)	deploy
Runbook & troubleshooting	reference/runbook

Build it locally:

uv sync --group docs
uv run mkdocs serve    # http://localhost:8000

Development

git clone https://github.com/cr0hn/festin.git && cd festin
uv sync --group dev
timeout 130 uv run pytest --timeout=30 -q    # 305 tests — always with the timeout

Contribution rules, complexity gates and verification checklist: reference/development.

License

Free for personal and professional use; hosted or paid services and commercial redistribution require a separate agreement with the author. See LICENSE.

Metadata

Release files for festin 0.3.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for festin 0.3.0
File	Size	Uploaded
festin-0.3.0.tar.gz	6.7 MB	Sep 7, 2026	Details

Built distribution (wheel)

Table of built distributions (wheels) for festin 0.3.0
File	Interpreter	ABI	Platform	Reset
festin-0.3.0-py3-none-any.whl 91.5 kB Sep 7, 2026	Python 3	none	any	Details

Total release size: 6.8 MB

Release files / festin-0.3.0.tar.gz

Download URL	festin-0.3.0.tar.gz
Size	6.7 MB
Tags	Source
SHA-256 checksum How to use checksums	`a12254195db081ec0a913ba384aa33bcfb067549a353c48879f0218a46661cbd`
BLAKE2b-256 checksum How to use checksums	`ec5bdcbaa61186b11233c9afce13990a9fc695f0eedc1a99fbd96557824e429f`
Upload date	Sep 7, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/7.0.0 CPython/3.13.14`

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/cr0hn/festin
Publishing commit: github.com/cr0hn/festin/tree/610d07a3ffcc157c2bc6d0a59b42b14c92e5e577

Workflow

Publishing configuration: github.com/cr0hn/festin/blob/610d07a3ffcc157c2bc6d0a59b42b14c92e5e577/.github/workflows/ci.yml
Publishing logs: github.com/cr0hn/festin/actions/runs/34121149168/attempts/1

Artifact

Subject: festin-0.3.0.tar.gz
SHA-256 checksum: a12254195db081ec0a913ba384aa33bcfb067549a353c48879f0218a46661cbd Verifying attestations

Release files / festin-0.3.0-py3-none-any.whl

Download URL	festin-0.3.0-py3-none-any.whl
Size	91.5 kB
Tags	Python 3
SHA-256 checksum How to use checksums	`ea3cfbd1cd4e11d87b65670db2299ec4e4ea26c9053c860ad7660a8dcf5c8eae`
BLAKE2b-256 checksum How to use checksums	`029b2ef87f2c7a0d97d3ece1af85a284783072faee43d81a9e39f5abce36c774`
Upload date	Sep 7, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/7.0.0 CPython/3.13.14`

Provenance

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/cr0hn/festin
Publishing commit: github.com/cr0hn/festin/tree/610d07a3ffcc157c2bc6d0a59b42b14c92e5e577

Workflow

Publishing configuration: github.com/cr0hn/festin/blob/610d07a3ffcc157c2bc6d0a59b42b14c92e5e577/.github/workflows/ci.yml
Publishing logs: github.com/cr0hn/festin/actions/runs/34121149168/attempts/1

Artifact

Subject: festin-0.3.0-py3-none-any.whl
SHA-256 checksum: ea3cfbd1cd4e11d87b65670db2299ec4e4ea26c9053c860ad7660a8dcf5c8eae Verifying attestations