Query your devices
Using a flexible and powerful query language.
Centrally collect data
Collect ongoing monitoring telemetry.
When certain conditions occur, trigger automated response actions.
Automatically collect the most important information using Artifacts.
Easily monitor your end points for high value events.
Interactively investigate an endpoint
Interactively examine end points remotely
Flexible and Fast
Rapidly hunt for new specific threats across all your endpoints! Simply add a new artifact or modify an existing one and immediately hunt for it across your entire infrastructure.
Free and Opensource software
Velociraptor is released under the GNU Affero General Public License. This means you can use it, modify it and deploy it without restrictions.
Depoloy in minutes.
Velociraptor works on macOS, Windows, Linux, FreeBSD, and others.
Velociraptor is distributed as a statically linked single binary. This ensures it does not require run time dependencies like dlls, or libraries to be present on the system.
Create new deployment in seconds.
Add a GUI user
Start the frontends