wraithwall 0.1.0

Production deception-and-threat-intelligence platform

WraithWall OSS

Production deception-and-threat-intelligence platform and companion packages.

Ecosystem

Package	Install	Purpose
wraithwall	pip install .	Flask platform — gateway, link intel, cowrie, BGP, canaries
ravenscan	pip install packages/ravenscan	Engineering intelligence CLI (raven) and library
canary-kit	pip install packages/canary-kit	Supply-chain canary token minting and detection
honeypot-mitre	pip install packages/honeypot-mitre	Cowrie logs → MITRE ATT&CK scoring
dml-spec	pip install packages/dml-spec	Signed deception markup language validator

Packages are independent — none imports another.

Quick start

git clone <repository-url>
cd wraithwall-oss
./install.sh
cp .env.example .env
docker compose up -d
wraithwall check
wraithwall serve

Python API

from wraithwall import create_app, Client
from wraithwall.link_checker import analyze
from wraithwall.gateway import Gateway

app = create_app()
client = Client("http://localhost:8000", api_key="...")
print(client.health())
result = analyze("https://example.com")
blocked = Gateway.is_ip_blocked("203.0.113.1")

from ravenscan import scan
from canary_kit import create_canary

profile = scan(".")
token = create_canary("my-sdk", "1.0.0")

CLI

wraithwall check
wraithwall serve --port 8000
wraithwall routes
raven scan .
canary-kit mint my-pkg 1.0.0 --type runtime
honeypot-mitre sample.json
dml validate traps.yaml

Configuration

All secrets and infrastructure endpoints come from environment variables (see .env.example). Nothing is hardcoded to a specific deployment.

Contributing

Install the full stack with ./install.sh, run pytest, then open a PR. Each package under packages/ has its own README and examples.