Roadmap

New targets

Today a target is the local machine, a host over SSH, or a Windows host over WinRM. Each new target keeps the same rule: refpoint reads it and compiles a report.

ContainersPlanned

Docker, Podman and LXC through the runtime socket on the host. Running containers are scanned without an SSH connection into each one.

Kubernetes and OpenShiftPlanned

Clusters as targets. Controls over cluster resources and their configuration, read through the cluster API.

Network devicesPlanned

MikroTik and other network gear, which offer a command interface but no general-purpose shell. The target contract already allows a transport that runs commands only.

Cloud accountsPlanned

Cloud resources and their configuration, read through the provider's API instead of a host connection.

Sharing profiles

Profile registryPlanned

Publish, find and version profiles. A profile written once against a framework can be reused across teams and engagements.