Looking for Advice on Growing an Open-Source Cybersecurity Project
Description
This content describes an open-source cybersecurity project called Vader-Pro-VDR, which is an AI-assisted vulnerability detection and remediation platform. The project includes a Go-based endpoint agent for system inventory collection and a Python FastAPI backend for processing and storing telemetry data. It features secure, encrypted data transmission and a modular API design. The post is a request for advice on growing the project and attracting contributors, not a report of a security vulnerability or threat.
Reddit Discussion
Hey everyone,
I've been working in cybersecurity for the last 5 years, and over the past year I've been building a project called Vader-Pro-VDR, an AI-assisted Vulnerability Detection & Remediation platform.
So far, I've built:
A Go-based endpoint agent that collects system and software inventory information.
A backend API that receives and processes agent data.
AWS-hosted infrastructure for communication between endpoints and the backend.
A working proof of concept that can identify installed applications and their versions across endpoints.
My long-term vision is to build a platform that can:
Continuously identify vulnerable software and configurations.
Correlate findings with CVE intelligence.
Use AI agents to provide remediation recommendations.
Eventually automate certain remediation workflows in a controlled manner.
The challenge I'm facing isn't necessarily technical anymore. I've realised that a project of this scope is difficult to build alone.
I work remotely and don't have much exposure to the open-source community, so I'm looking for advice from people who have built or maintained open-source projects before.
Some questions I have:
How did you find your first contributors?
At what stage did you make your project public?
What communities have been most helpful for cybersecurity-focused open-source projects?
Are there common mistakes first-time maintainers should avoid?
What would make you interested in contributing to a project like this?
The repository is here:
https://github.com/Tridents10/Vader-Pro-VDR
I'm looking for honest feedback, technical criticism, and advice on how to take this from a personal project to a community-driven one.
Thanks in advance.
Links cited in this discussion
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Vader-Pro-VDR is a lightweight, distributed endpoint telemetry and asset management platform designed with a zero-trust architecture. It collects detailed system and software inventory data across multiple operating systems using a Go agent, encrypts the data locally with AES-256-GCM, and securely transmits it to a Python FastAPI backend hosted on AWS. The backend decrypts and stores telemetry data in a SQLite database for analysis. The project aims to continuously identify vulnerable software and configurations, correlate findings with CVE intelligence, and eventually automate remediation workflows. The current content is a community outreach post seeking advice on open-source project growth and contributor engagement, not a disclosure of a security vulnerability or exploit.
Potential Impact
No direct security impact or vulnerability is described. The content is a project announcement and request for community advice. There is no indication of a security flaw, exploit, or active threat associated with the project as presented.
Defensive Guidance
No mitigation is required as this is not a security vulnerability or threat. The content is a request for advice on project development and community building.
Technical Details
- Source Type
- Subreddit
- cybersecurity
- Reddit Score
- 0
- Discussion Level
- minimal
- Content Source
- reddit_link_post
- Post Type
- link
- Newsworthiness Assessment
- {"score":30,"reasons":["external_link","newsworthy_keywords:rce","established_author","very_recent"],"isNewsworthy":true,"foundNewsworthy":["rce"]}
- Has External Source
- true
- Trusted Domain
- false
Threat ID: 6ad495e22cdf04f6565856e1
Added to database: 10/18/2026, 09:48:18 UTC
Last enriched: 10/18/2026, 09:48:21 UTC
Last updated: 10/19/2026, 03:18:21 UTC
Views: 13
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.