Security Question: Telemetry/Analytics/Connections to Third Parties about attack-workbench-frontend HOT 2 CLOSED

Hi rainmana!

ATT&CK Workbench doesn't collect or send any telemetry data to MITRE or any other entity. That seems like something that we can add to our documentation to make it clear.

In terms of vulnerabilities, we use static scans of the code to identify dependencies that have known vulnerabilities and address those when we encounter them. We haven't performed any pen testing or similar exercises though.

from attack-workbench-frontend.

Thank you so much for the clarity/added context! It helps a lot with the selection process for a tool like this! If you end up adding static scan results and/or clarity about the presence of telemetry, I'd love a link, but no worries if not!

Thanks again for the fast response time in answering too!

Alec (Rainmana)

from attack-workbench-frontend.