Skip to content

Umbryx EE

Umbryx EE (Enterprise Edition) is Umbryx Core plus the infrastructure side of the lifecycle: deploying, integrating and tearing down attack infrastructure — C2 stacks, redirectors, droppers, pivots, DNS and TLS — from a catalog, with a signed license.

EE is the same codebase with one additional package: backend/app/ee (the frontend adds src/ee/). The database schema is unchanged, so Core → EE is an image swap, and an unlicensed EE degrades to the Core feature set rather than breaking.

What EE adds

Platform Ops (infrastructure lifecycle)

  • Catalog & Builder — built-in templates for Adaptix, Sliver, Mythic (single and full multi-container), Covenant, nginx redirectors, pwndrop droppers, Ligolo pivots; blueprints like "C2 + Redirector + Dropper" and "C2 Cluster"
  • Deployments — idempotent stack deploys with per-step tracking, automatic rollback (k8s rollout undo, fallback destroy), post-deploy pipeline: service discovery → links verification → credential generation → C2 auto-registration → listener push → VPN → DNS
  • Providers — credentials for cloud and virtualization providers: registered adapters: ssh_host, hetzner, proxmox, aws, docker, k8s, cloudflare_dns, route53_dns; API-driven VPS creation for Hetzner/DigitalOcean/Vultr
  • Deploy methods — ssh (Docker over SSH), docker (Engine API), k8s (kubectl), terraform (IaC), ssh_bare (nginx directly on the host)
  • DNS & SSL — zone/record management with sync and propagation checks, certificates via a built-in ANetExec client (Let's Encrypt, DNS-01)
  • Links — http_proxy (nginx reverse proxy on a redirector), a_record, proxy_chain, net_tunnel (WireGuard/chisel)

Workstation provisioning

  • Creating workstation machines from templates (Hetzner, Proxmox via Terraform, Docker, Kubernetes, manual/SSH) with readiness polling and teardown
  • Per-project cloud workstations, including the built-in executor-box image with the offensive toolchain preinstalled
  • Executor bridge: any pool machine can be flipped into a scan/exec target for the platform

Managed instances

A Kubernetes-only pool of template services with claim/release into projects, per-user instance credentials (encrypted at rest), and status/reconfig lifecycle.

HA deployment recipe

docker-compose.ha.yml (guided installer modes are planned): pg_auto_failover, HAProxy + keepalived VIP, Redis Sentinel. The application reads the same variables in both editions; the packaged recipe ships with EE.

Licensing

  • No license key is required for Core. EE requires a signed Ed25519 license token bound to the installation.
  • Activation (online): instances phone home once per 24h to the license server (LICENSE_SERVER_URL, default https://update.umbryx.pro); a renewed token is applied automatically.
  • Activation (air-gapped): System → License → download the activation request (C2V), receive a signed .lic from the vendor, upload it, switch the channel to offline.
  • Lifecycle: active → grace (expired, default 14 days) → wind_down. In wind-down, mutations are blocked with 402 but viewing, export and teardown keep working; no data is ever deleted and deployed infrastructure is never stopped by the platform itself.

Tiers and limits (members, infrastructure instances, workstations, audit retention, provider classes, features like SSO) are carried by the signed token — see GET /api/system/license/state.

Known limitations

  • AWS/Azure/GCP machines are consumed as pre-provisioned SSH hosts; API-driven VPS creation is Hetzner/DigitalOcean/Vultr only
  • Cobalt Strike — not supported at this stage (planned; see C2 integrations)
  • Proxmox is available for pool workstations (Terraform) but not for per-project cloud workstations