Skip to content

Threat Patrols Actions

Threat Patrols Actions (TPAS) are collections of well known security tools that have been packaged, wrapped and kept up-to-date in a way that makes their use in continuous security automation pipelines much easier.

Attention

These docs relate to the Threat Patrols Actions framework itself. If you want a big list of Threat Patrols Actions and the documentation for them, you can find them over here.

Features

  • all actions are available as ready-to-run API microservices.
  • all actions are available as command-line tools (within Docker containers).
  • all actions can be invoked as Github Actions!
  • all actions can be invoked as Gitlab Runner templates!
  • all actions can invoke multiple callbacks with payloads to send outputs to HTTP endpoints, S3-compatible-storage, Slack messages, SMTP emails.
  • API actions can be invoked as background tasks with a task_id for back reference.
  • Outputs are JSON formatted making it easy to integrate with other systems, custom binary outputs are possible.
  • All tools are vetted, validated and kept up-to-date by us for you.

This means you can do things like -

  • Create AI/LLM pipelines to perform nmap scans and receive well formatted results to consume with your favorite AI model.
  • Schedule regular nmap scans inside your private network using a local Github Runner, save the results to S3 and get a Slack message with results.
  • Invoke nmap scans from your n8n workflows and receive results as callbacks then they finish.
  • Refer back to previous nmap runs to recover results (from S3) for scans performed many months ago; awesome for security assessments.

These are just some ordinary examples using plain-old nmap

Threat Patrols Actions has many other well-known security tools vetted, validated, packaged and ready to use, check them out here.

Threat Patrols

Threat Patrols is an Australian cybersecurity company that provides continuous SecOps for organizations seeking additional cybersecurity capacity. We develop and release our awesome tool-chains as well. Find us here if you'd like us to help manage your Threat Patrols Actions outputs and workflows.

Apache 2.0 License

Copyright 2025 Threat Patrols Pty Ltd

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.