Cybersecurity toolkits · Rank #43

C

OctoC2

Grade C: derived only from the two verdicts below. How grades work

GitHub-native command-and-control framework for authorized security research, with encrypted multi-channel transport and resilient failover.

SlowingDeps unknownFree

Why this verdict

How we check →
  • No commits in 90 days; last commit 93 days ago. receipt ↗
  • Not counted in verdict: TypeScript 5 → 7. receipt ↗

Snapshot: commit cee1d45 on main, checked 2026-10-19 07:21 UTC. Receipts link to files at this exact commit.

Dependency freshness

PackageDeclaredLatestStatus
TypeScript typescript5.9.37.0.2Behind, not counted

Declared = lowest version the kit's dependency file (package.json, pyproject.toml or requirements.txt) allows. Latest = the npm "latest" tag or the newest PyPI release. TypeScript, the Stripe SDK, FastAPI and other 0.x packages are shown but not counted in the verdict.

What the README says you get

  • Other
    Encrypted multi-channel transportencrypted multi-channel transport and resilient failover
  • Other
    Relayed proxy pathsa signed two-repository proxy, relay consortium, and Codespaces SSH tunnel
  • Other
    Ed25519 beacon identitypersists its Ed25519 identity and task ledger
  • Other
    Signed task protocolshare one signed task protocol, one identity model
  • Other
    Exclusive delivery leasesExclusive delivery leases prevent competing transports from claiming one task
  • Other
    Durable replay stateDurable replay state and the beacon task ledger survive restarts
  • Other
    Opt-in loopback listenersNetwork listeners are opt-in and loopback-first
  • Other
    TLS-only HTTPHTTP is TLS-only; gRPC requires mTLS
  • Other
    Per-beacon certificatesa distinct client certificate per beacon, and an exact SHA-256 certificate fingerprint binding
  • UI
    Local operator dashboardLocal operator interface for beacon and task activity

Extracted from the kit's README by a local AI model (deepseek-flash) on Sep 29, 2026. Every item is checked against an exact README quote; 4 unverifiable items were discarded. A README claim is the maker's description, not something we tested.

Watch OctoC2

Get told if it goes dormant, gets archived, falls further behind on a core dependency, or changes its license or price.

You'll get a confirmation email first. One click to unsubscribe. Watch as many kits as you like.

RSS feed for OctoC2 · all changes

History

Sep 29, 2026 → Oct 19, 2026. One square per check, colored by maintenance status. Hover for details.

Show as a table
DateMaintenanceDependenciesCommits (90d)
Oct 19, 2026SlowingDeps unknown0
Oct 12, 2026SteadyDeps unknown9
Sep 29, 2026SteadyDeps unknown9

Sources

Every claim on this page comes from these public records, checked . Open them to verify.

Maintainer? Add the badge

It updates automatically every time we refresh the evidence. Clicking it opens this page.

kitproof badge for OctoC2
[![kitproof](https://kitproof.dev/badge/octoc2.svg)](https://kitproof.dev/kits/octoc2/)