Dradis Community Edition Ubuntu 24.04

Dradis Community Edition is an open source collaboration and reporting framework for security assessments and penetration tests. It gives a team one place to import output from the tools they already use (Nmap, Nessus, Burp Suite, OpenVAS, Qualys, Nikto, Metasploit and many more), organise nodes, issues and evidence on a shared project tree, and turn the result into consistent, repeatable reports. Dradis has been developed in the open since 2007 and is widely used by security consultancies and internal red and blue teams to keep assessment work in one auditable place.

This cloudimg image installs Dradis Community Edition v5.2.0 from the official dradis/dradis-ce repository on a hardened, fully patched Ubuntu 24.04 LTS base. It runs as a Ruby on Rails 8 application on Ruby 3.4.6 (built with rbenv), served by the Puma application server on the loopback interface and reverse proxied by nginx on port 80, with a SQLite database and a Redis backed Resque worker for background jobs. Assets are precompiled at build time and the whole stack starts automatically on boot.

Secure by default: Dradis Community Edition uses a single shared login password, and this image ships with no usable default credentials. The shared password and the Rails application secret key are both generated uniquely on the first boot of every virtual machine, written to a root only credentials file, and the built in setup wizard is completed non interactively so the appliance boots straight to a login gated dashboard. Every application page requires the shared password; only the login form and a health probe are served without authentication. The database and secrets are wiped from the image before capture, so nothing is shared between instances.

Dradis Community Edition is free and open source under the GNU General Public License v2.0. cloudimg provides 24/7 commercial support with a guaranteed 24 hour response SLA, separate from the upstream project, and the cloudimg charge covers packaging, security patching, image maintenance and support.