Osmedeus is a security-focused orchestration engine that automates complex security workflows through declarative YAML definitions with encrypted data handling and sandboxed execution.
The tool addresses the challenge of coordinating multiple security tools and processes across distributed infrastructure. It works by allowing users to define workflows in YAML with support for conditional branching, hooks, and module exclusion, then executes these pipelines across multiple runners including host machines, Docker containers, and SSH connections. The engine includes a Redis-based master-worker pattern for distributed execution, webhook triggers for event-driven automation, and file synchronization across workers.
Osmedeus suits teams conducting reconnaissance, penetration testing, and bug bounty work who need to orchestrate scanning and analysis at scale. It is particularly valuable for those managing attack surface assessments or running repeated security workflows across cloud infrastructure. The tool provides both a command-line interface and a REST API with embedded dashboard, making it accessible to users with varying technical backgrounds. The rich function library includes integrations with common security tools like nmap, SSH execution, and SARIF parsing, alongside TypeScript and Python scripting capabilities. The project distinguishes itself through agentic LLM capabilities that enable tool-calling agent loops with sub-agent orchestration and support for multiple AI providers, allowing security workflows to incorporate AI-driven decision making and analysis.
The project maintains active development with regular updates to its core orchestration features and expanding integrations. The tool receives ongoing enhancements to its distributed execution capabilities and cloud infrastructure support. Development includes continuous refinement of the declarative workflow syntax and function library to support emerging security automation patterns. The project sustains community engagement through documentation, Discord community channels, and sponsorship programs.
