City Watch is an automated, real-time security scanning and intrusion monitoring tool designed to detect vulnerabilities, track configuration drift, and safeguard network environments. Built with defense-in-depth principles, it continuously inspects target systems, logs anomalous activity, and generates actionable threat reports to help developers and system administrators maintain a robust security posture.
Key Highlights & Features
Continuous Threat & Port Auditing: Proactively scans exposed endpoints and network services to flag common misconfigurations and attack surfaces before exploitation occurs.
Real-Time Anomaly Alerting: Flags suspicious network traffic patterns, unrecognized access attempts, or sudden changes in system baselines.
Lightweight & Modular Architecture: Easy to integrate into automated deployment pipelines (CI/CD) or run as a standalone background daemon across distributed hosts.
Actionable Reporting: Provides clear, human-readable terminal summaries alongside structured data formats (JSON/CSV) for straightforward integration into SIEM tools or existing log aggregators.
Designed for quick configuration via simple YAML/JSON policies, allowing teams to tune scanning sensitivity and alert thresholds with minimal overhead.