PAGES
← all tools
◆ Exploitation & C2

starkiller

v4.0.3 open-source

Starkiller is a Frontend for Empire.

Summary

Starkiller is an open-source desktop application that serves as the graphical frontend for PowerShell Empire, the post-exploitation command-and-control framework, and it is free to use. Built with VueJS and packaged as a submodule of Empire since version 5.0, it runs against Empire's API rather than as a standalone install, giving red teamers and penetration testers a GUIGUIA graphical user interface, controls such as windows, buttons and menus. It lets people use software visually rather than entering commands. over agent management, listeners, modules, and credentials instead of Empire's console interface. Its README describes it plainly as a frontend for Empire, so it sits alongside that project rather than competing with separate C2 platforms. With 8 contributors, 27 commits in the past year, and a release only 20 days ago, it is actively maintained, most recently adding job management and a plugin marketplace to the agent interface.

Starkiller is a Frontend for Empire.

How starkiller helps

Which agents are checked in right now and what is each one waiting on?

the dashboard's agent check-in list and topology panel show live agent state, with a right-click menu to open, popout, execute a shell or module, kill, or focus on any node

Which background jobs are still running on a compromised host, and can they be stopped?

the Jobs tab on the agent page lists jobs in progress with a stop or kill option for each

What has actually happened across an engagement so far, and what does a given task's output and parameters look like?

the task tables and expanded task view show each task's ID, module or task name, options as chips, and full terminal output, and allow rerunning the same task

Which listeners, hosts, and credentials are currently active across the engagement?

dedicated pages list listeners, hosts, and stored credentials with their current state, editable from the same views without touching a console

Are there plugins available that add capability this engagement needs?

the plugin marketplace lists installable plugins with a detail and settings page for reviewing and configuring each one before use

What is the overall shape of the engagement right now — how many agents, how active, how connected?

the dashboard's summary metrics and agents breakdown chart give a count and health view of agents alongside a topology graph of how they relate

all 24 features, with the evidence for each →

Languages

Not documented

Features

24 capabilities across 5 areas · 11 backed by code, an API document or a real run

Built from starkiller's releases, docs, README and our own runs. “Seen” marks the month we first spotted a release the vendor didn't date. Group names and tags are our labels.

Compare with peers →

What starkiller offers you

  • REST API10
  • Command-line interface2
  • Offline mode1
  • Plugin API support1
  • Plugin system1
Agent and Listener Operations 2 capabilities Starkiller's core function is managing the full lifecycle of listeners that receive connections and agents that run on compromised hosts. Operators can create, configure, task, and remove both through a consistent set of controls.
Agent management verified Lets operators manage active agents, issue tasks to them, and review the results and system details they report back. 5 releases · 32 other sources · first seen May 2020

Also counts toward: REST API

release

  • Agents (33 endpoints) — create, read, update, delete 0.1.0 · Aug 2026 · source · release history
  • Add ansi formatting to plugin and agent tasks v2.4.2 · Jul 2023 · source · release history
  • Adds the ability to view archived (deleted) agents 2.0.0 · Jan 2023 · source · release history
  • Make the http/https prefixes in the empire url field optional (defaults to https) v1.2.4 · Jul 2020 · source · release history
  • Displays an indicator for elevated process status on the agents list. v1.2.0 · May 2020 · source · release history

docs

  • Web-based frontend for PowerShell Empire C2 framework, built with VueJS to manage agents, modules, and listeners.

example

  • Access previously removed agents for auditing or analysis. Navigate to the agents section and select the view for archived (deleted) agents. 2.0.0 · Jan 2023 · source
  • Upload a new agent or download existing agent artifacts via the Agent page. Go to Agents, then use the Upload/Download controls in the interface 1.6.0 · Jan 2021 · source

api 29 total

Listener management verified Lets operators create and manage listeners that wait for incoming agent connections. 4 releases · 13 other sources · first seen Sep 2021

Also counts toward: REST API

release

  • Listeners (10 endpoints) — create, read, update, delete 0.1.0 · Aug 2026 · source · release history
  • Adds the ability to turn listeners on and off 2.0.0 · Jan 2023 · source · release history
  • Adds the ability to modify listener options 2.0.0 · Jan 2023 · source · release history
  • Adds a validate step to listener creation to support multi-step listeners like onedrive. v1.9.0 · Sep 2021 · source · release history

docs

  • Web-based frontend for PowerShell Empire C2 framework, built with VueJS to manage agents, modules, and listeners.

api 12 total

Payload and Delivery Configuration 4 capabilities Starkiller provides the building blocks for generating and customising payloads that establish agent connections. This covers stager generation, Malleable C2 profile management, and the bypass and obfuscation settings that shape how payloads behave and evade defences.
Malleable profile management verified Lets operators define and manage Malleable C2 profiles that control how agent traffic is shaped and disguised. 11 releases · 8 other sources · first seen Dec 2022

Also counts toward: REST API

release 11 total

  • Adds a confirmation prompt before stopping a running task v4.0.3 · Sep 2026 · source · release history
  • Renders Empire 7.0 typed boolean module options as toggle switches via the value_type option metadata v4.0.3 · Sep 2026 · source · release history
  • 10 more areas: Malleable Profiles, Modules, Stagers, Hosts, Ips, Admin, Listener Templates, Stager Templates, Meta, Tags 0.1.0 · Aug 2026 · source · release history
  • Adds server-side validation error feedback to dynamic forms v3.6.0 · Aug 2026 · source · release history
  • Enables killing background jobs directly from the Jobs tab. v3.4.0 · Apr 2026 · source · release history
  • Adds a Jobs tab to the agent page for viewing and managing background jobs. v3.4.0 · Apr 2026 · source · release history

example

  • Manage Cobalt Strike malleable profiles directly within the Starkiller interface without external editors. In the Starkiller UI, navigate to the Malleable Profile section to create or edit a new profile. v1.12.0 · Dec 2022 · source

api 7 total

Bypass management verified Lets operators define bypass techniques that are applied when generating payloads to help avoid security controls. 8 releases · 7 other sources · first seen Jan 2021

Also counts toward: REST API

release 8 total

  • Filters the bypass picker to stagers matching the selected execution language v4.0.3 · Sep 2026 · source · release history
  • Bypasses (7 endpoints) — create, read, update, delete 0.1.0 · Aug 2026 · source · release history
  • Reorganizes the navbar with a default mini mode and sub-menus. v3.0.0 · Mar 2025 · source · release history
  • Reorganizes the navbar with a default mini mode and sub-menus. v3.0.0-rc1 · Mar 2025 · source · release history
  • Adds reload buttons to agents pages for refreshing sysinfo data v2.7.3 · Feb 2024 · source · release history
  • Enables uploading files from the file browser menu for Powershell agents. v1.9.0 · Sep 2021 · source · release history

api 7 total

Obfuscation and keyword management verified Lets operators configure obfuscation settings and keyword substitutions applied to payloads to hinder static analysis. 2 releases · 9 other sources · first seen Jan 2023

Also counts toward: REST API

release

  • Keywords (10 endpoints) — create, read, update, delete 0.1.0 · Aug 2026 · source · release history
  • Adds an obfuscation page to manage keyword obfuscation and global obfuscation 2.0.0 · Jan 2023 · source · release history

api 9 total

Stager management verified Lets operators generate and manage stagers — the initial payloads used to launch agents on target systems. 3 releases · 8 other sources · first seen Jul 2021

Also counts toward: REST API

release

  • 10 more areas: Malleable Profiles, Modules, Stagers, Hosts, Ips, Admin, Listener Templates, Stager Templates, Meta, Tags 0.1.0 · Aug 2026 · source · release history
  • Adds a button in the Listener View top bar that prefills a stager form with the listener's id 2.0.0 · Jan 2023 · source · release history
  • Add a StarkillerName field on stagers for better identification v1.8.0 · Jul 2021 · source · release history

example

  • Set the StarkillerName field on a Stager for identification. When creating or editing a Stager, enter a value in the StarkillerName field. v1.8.0 · Jul 2021 · source

api 7 total

Collected Data Management 3 capabilities During an operation, Starkiller tracks the credentials, files, and host information gathered from target environments. Operators can store, tag, and retrieve this material through a common interface.
Download management verified Lets operators upload files to and retrieve files from the server, supporting file transfer tasks during an operation. 7 releases · 15 other sources · first seen Feb 2021

Also counts toward: REST API

release 7 total

  • Adds auto-select of the best DotNetVersion based on the agent's installed .NET v4.0.3 · Sep 2026 · source · release history
  • Downloads (7 endpoints) — create, read, update, delete 0.1.0 · Aug 2026 · source · release history
  • The import script button and script command checkbox have been removed from the agent page. v3.0.0 · Mar 2025 · source · release history
  • The import script button has been removed from the agent page. v3.0.0-rc1 · Mar 2025 · source · release history
  • The script command checkbox has been removed from the agent page. v3.0.0-rc1 · Mar 2025 · source · release history
  • Downloads page for exporting data v2.0.5 · Feb 2023 · source · release history

example

  • Refresh stale system information for agents without navigating away. Click the reload button on the agent page to refresh sysinfo v2.7.3 · Feb 2024 · source
  • Import a local script into an agent session via the new UI button. Navigate to the agent page and click the 'script_import' button. v2.3.2 · Jun 2023 · source
  • Configure a module option to use a file selector for easier file selection. When configuring a module with a 'file' type option, select the file using the new uploader. v2.3.2 · Jun 2023 · source
  • Export inputs, outputs, or joined results using the new Downloads page. Navigate to the Downloads page from the main menu. v2.0.5 · Feb 2023 · source
  • Upload or download files associated with an agent In the Starkiller UI, go to the Agents page, select an agent, and use the upload/download controls. v1.6.0 · Feb 2021 · source

api 10 total

Host and IP tracking verified Lets operators record and query hosts and IP addresses encountered across an operation for situational awareness. 3 releases · 10 other sources · first seen Apr 2020

release

  • Adds a per-agent Stats tab on the agent page (task counts, host info, check-in and tasks-over-time charts) v4.0.3 · Sep 2026 · source · release history
  • Adds a Per-agent Stats tab on the agent page showing task counts, host info, check-in and tasks-over-time charts 4.0.0 · Jul 2026 · source · release history
  • Adds a Reporting tab that queries and displays data from an Empire 3.1.5 reporting endpoint v1.1.0 · Apr 2020 · source · release history

example

  • Review task throughput and check-in cadence for a single agent without pivoting to the global dashboard. Navigate to Agents > select an agent > Stats tab to view task counts, host info, and check-in and tasks-over-time charts. v4.0.3 · Sep 2026 · source
  • Monitor system health and agent topology from a single centralized view. In the Starkiller GUI, navigate to Dashboard > Overview 4.0.0 · Jul 2026 · source
  • View generated reports for Empire operations directly within the Starkiller GUI. In Starkiller, open the Reporting tab and ensure it is configured to point to your Empire 3.1.5 reporting endpoint. v1.1.0 · Apr 2020 · source

api 7 total

Credential management verified Lets operators store, tag, and review credentials harvested from target systems during an operation. 2 releases · 10 other sources · first seen Jul 2021

Also counts toward: REST API

release

  • Credentials (8 endpoints) — create, read, update, delete 0.1.0 · Aug 2026 · source · release history
  • Shows previews of credentials in CredID autocomplete instead of just numeric IDs. v1.9.0 · Sep 2021 · source · release history

example

  • Copy Listener, Stager, or Credential data via the UI context menu. In the Agents/Listeners/Credentials list, right-click an item and select 'Copy'. v1.8.0 · Jul 2021 · source
  • Edit or delete a Credential entry from the Credentials page. In the Credentials list, click the Edit or Delete action for the target credential. v1.8.0 · Jul 2021 · source

api 8 total

Platform Administration 3 capabilities Starkiller includes controls for managing the users, plugins, and automated testing that keep the platform operational. These capabilities support the operators and developers who maintain the tool rather than the operations themselves.
Plugin management verified Lets administrators install, configure, and task plugins that extend Starkiller's built-in capabilities. 11 releases · 24 other sources · first seen Apr 2020

Also counts toward: Plugin API support, Plugin system, REST API

release 11 total

example 7 total

  • Browse and manage installed plugins via the new list view In the Starkiller UI, navigate to the Plugins section to view the plugin list. v1.6.0 · Feb 2021 · source
  • Execute a specific plugin directly from its detail page In the Starkiller UI, navigate to a plugin's detail view and use the execution interface. v1.6.0 · Feb 2021 · source
  • Browse available plugins in Starkiller's new list view. Navigate to the Plugins > List section in the left sidebar 1.6.0 · Jan 2021 · source
  • Execute a specific plugin from its dedicated execution interface. Navigate to the Plugins > Execution section and select a plugin 1.6.0 · Jan 2021 · source
  • View associated MITRE techniques for a tool or action before executing it. In the Starkiller GUI, navigate to the modules list page and inspect the 'Techniques' column. v1.3.0 · Jul 2020 · source
  • Check MITRE context while configuring an execution. In the Starkiller GUI, go to the execute module page and view the MITRE techniques displayed for the selected command. v1.3.0 · Jul 2020 · source

api 17 total

User management verified Lets administrators create and manage operator accounts that control access to the platform. 3 releases · 7 other sources · first seen May 2020

Also counts toward: REST API

release

  • Users (8 endpoints) — create, read, update 0.1.0 · Aug 2026 · source · release history
  • Removed API Token from settings because v2 API uses JWT authentication v2.0.5 · Feb 2023 · source · release history
  • Hides non-admin features from non-admin users in the interface. v1.2.0 · May 2020 · source · release history

api 7 total

End-to-end test suite shipped Runs an automated end-to-end test suite against the platform on every code change to catch regressions before release. 1 release · first seen Aug 2026

release

  • Introduces a Playwright end-to-end test suite run as a CI job on every PR. v3.6.0 · Aug 2026 · source · release history
Other 12 capabilities
Agent Terminal shipped Execute agent modules and shell commands via a terminal-like interface within the agent interaction tab. 8 releases · 3 other sources · first seen Feb 2023

Also counts toward: Command-line interface

release 8 total

  • Caps the terminal's live output buffer at 500 lines to bound memory growth on long-running sessions v4.0.3 · Sep 2026 · source · release history
  • Adds a dedicated Shell session tab and multi-tab Terminal support v4.0.3 · Sep 2026 · source · release history
  • Adds a dedicated Shell session tab and multi-tab Terminal support for interactive sessions 4.0.0 · Jul 2026 · source · release history
  • Adds Task ID and Module Name/Task Name to terminal output and the task tab. v3.3.0 · Feb 2026 · source · release history
  • Adds autocomplete to the terminal for listeners, suggested values, and bypasses. v3.0.0 · Mar 2025 · source · release history
  • Adds autocomplete to the terminal for listeners, suggested values, and bypasses. v3.0.0-rc1 · Mar 2025 · source · release history

example

  • Interact with agents using command-line-like inputs directly from the tool's interface. Navigate to Interact tab > select Agent terminal v2.6.1 · Oct 2023 · source
  • Execute agent modules via the new terminal interface in the Interact tab. In the Starkiller UI, navigate to the Interact tab and select the Agent terminal option. 2.6.0 · Sep 2023 · source
  • Execute a shell command without built-in aliases in Starkiller. In the Agent Shell view, check the `literal` checkbox before sending your command. v2.0.5 · Feb 2023 · source
Operational analytics and dashboarding shipped Provide centralized operational visibility with a Dashboard overview page, per-agent statistics, and interactive topology graphs. 8 releases · 2 other sources · first seen Jul 2026

release 8 total

  • Adds a Dashboard overview page with summary metrics, agent check-ins, a recent-tasks list, an agents breakdown chart, and an interactive topology panel v4.0.3 · Sep 2026 · source · release history
  • Adds a per-agent Stats tab on the agent page (task counts, host info, check-in and tasks-over-time charts) v4.0.3 · Sep 2026 · source · release history
  • Adds an interactive agent topology graph panel on the Dashboard with fullscreen expand and context-aware right-click menu v4.0.3 · Sep 2026 · source · release history
  • Adds per-agent Stats tab showing task counts, host info, and timing charts v4.0.3 · Sep 2026 · source · release history
  • Adds a Dashboard overview page with summary metrics, agent check-ins, recent tasks list, and interactive topology panel v4.0.3 · Sep 2026 · source · release history
  • Adds an interactive agent topology graph panel on the Dashboard with fullscreen expand and a context-aware right-click menu (Open, Popout, Execute shell/module, Kill, Focus) v4.0.3 · Sep 2026 · source · release history

example

  • View detailed performance and host data for a specific agent from its page. Navigate to an agent's details page and click the 'Stats' tab to see task counts, host info, and check-in charts. v4.0.3 · Sep 2026 · source
  • Monitor system health and agent topology from a single centralized view. In the Starkiller GUI, navigate to Dashboard > Overview 4.0.0 · Jul 2026 · source
Tasks shipped Generate and view reports from operations through the interface. 8 releases · 2 other sources · first seen Apr 2020

previously: Operational reporting

release 8 total

  • Adds a Dashboard overview page with summary metrics, agent check-ins, a recent-tasks list, an agents breakdown chart, and an interactive topology panel v4.0.3 · Sep 2026 · source · release history
  • Adds an interactive agent topology graph panel on the Dashboard with fullscreen expand and a context-aware right-click menu (Open, Popout, Execute shell/module, Kill, Focus) v4.0.3 · Sep 2026 · source · release history
  • Adds a new Dashboard overview page with summary metrics, agent check-ins, recent tasks list, agents breakdown chart and an interactive topology panel 4.0.0 · Jul 2026 · source · release history
  • Adds a plugin marketplace for discovering and installing plugins directly from the UI. v3.0.0 · Mar 2025 · source · release history
  • Adds a plugin marketplace for discovering and installing plugins directly from the UI. v3.0.0-rc1 · Mar 2025 · source · release history
  • Advanced filtering on the reporting (Tasks) page v2.0.5 · Feb 2023 · source · release history

example

  • Visualize pivot chains across your active agents and launch actions without leaving the graph view. In the Dashboard, click the topology panel to open the interactive agent graph. Right-click any agent node to access the context menu: Open, Popout, Execute shell/module, Kill, or Focus. v4.0.3 · Sep 2026 · source
  • View generated reports for Empire operations directly within the Starkiller GUI. In Starkiller, open the Reporting tab and ensure it is configured to point to your Empire 3.1.5 reporting endpoint. v1.1.0 · Apr 2020 · source
Tagging shipped Apply tags to filter and organize cyber tooling entities including listeners, agents, tasks, plugins, credentials, and downloads from a unified interface. 4 releases · 4 other sources · first seen Jul 2023

release

  • Adds a revamped v2 tag picker dialog for attaching tags to agents, listeners, and other taggable entities — with a filter box, checklist of existing tags, and inline create-and-attach v4.0.3 · Sep 2026 · source · release history
  • Adds a new tag picker dialog with inline create-and-attach for agents, listeners, and other entities v4.0.3 · Sep 2026 · source · release history
  • Adds a new tag picker dialog for attaching tags to agents, listeners, and other taggable entities with filter box and inline create-and-attach 4.0.0 · Jul 2026 · source · release history
  • Adds a reusable Tag Manager component that applies to Listeners, Agents, Agent Tasks, Plugin Tasks, Credentials, and Downloads 2.5.0 · Jul 2023 · source · release history

example

  • Organize agents by campaign or target using the new tag picker without leaving the agent view. Navigate to Agents > select an agent > Tags > open the tag picker dialog, type a tag name in the filter box to find or create it, then check it to attach it to the agent. v4.0.3 · Sep 2026 · source
  • Create and attach a new tag to an agent via the GUI without leaving the context. Open the tag picker dialog for an agent and type a new tag name in the filter box to create and attach it inline. v4.0.3 · Sep 2026 · source
  • Attach or create tags for an agent directly during selection without opening separate settings. On the Agent page, use the new tag picker dialog with inline create-and-attach 4.0.0 · Jul 2026 · source
  • Apply tags to filter multiple cyber tooling entities (listeners, agents, tasks, etc.) from a unified interface. Navigate to any list page (e.g., Listeners or Agents) and use the new Tag Manager component to filter results. 2.5.0 · Jul 2023 · source
Interactive shell sessions shipped Establish dedicated multi-tab terminal sessions for interactive commands separate from standard task execution. 3 releases · 1 other source · first seen Jul 2026

Also counts toward: Command-line interface

release

  • Adds a dedicated Shell session tab with multi-tab Terminal support v4.0.3 · Sep 2026 · source · release history
  • Adds a dedicated Shell session tab and multi-tab Terminal support v4.0.3 · Sep 2026 · source · release history
  • Adds a dedicated Shell session tab and multi-tab Terminal support for interactive sessions 4.0.0 · Jul 2026 · source · release history

example

  • Run a shell command in a new tab while monitoring other sessions. Open a new Shell session tab from the multi-tab Terminal support interface to execute commands. v4.0.3 · Sep 2026 · source
Notifications shipped Manage and subscribe to agent task results through a dedicated notification page and bell icon. 4 releases · first seen Sep 2023

release

  • Chat messages now render Markdown — bold, italic, strikethrough, inline code, code blocks, links, lists, blockquotes, and tables; links are hardened with noopener/noreferrer/no-referrer and restricted to http/https; the message box is now multi-line (Enter sends, Shift+Enter adds a newline) v4.0.3 · Sep 2026 · source · release history
  • Migrates from Vue 2/Vuetify 2 to Vue 3/Vuetify 3, replacing vue-beautiful-chat with a native Vuetify 3 chat drawer. v3.4.0 · Apr 2026 · source · release history
  • Adds a dedicated notification page and notification bell in the UI for managing agent task results and subscriptions v2.6.1 · Oct 2023 · source · release history
  • Add a notification page and notification bell with subscription capabilities 2.6.0 · Sep 2023 · source · release history
Auto-refresh shipped Automatically refresh agent, plugin, and task views to keep status up to date without manual reloading. 2 releases · 2 other sources · first seen Jul 2023

release

example

  • Monitor Agents tasks without manually refreshing the browser window. Navigate to the Agents / Agents Tasks page; the view now auto-refreshes with new data. 2.7.0 · Nov 2023 · source
  • Monitor Plugins tasks without manually refreshing the browser window. Navigate to the Plugins Tasks page; the view now auto-refreshes with new data. 2.7.0 · Nov 2023 · source
Context Navigation shipped Select target agents directly within forms or quickly create new jobs without switching context. 1 release · 1 other source · first seen Dec 2023

release

  • Adds an agent dropdown when Agent is a field in a form to select the target agent v2.7.1 · Dec 2023 · source · release history

example

  • Quickly create a new agent job without leaving the form context 1. Open the Agent creation form in Starkiller 2. Look for the 'Agent' field (now a dropdown) 3. Select the desired agent from the list 4. Submit the form v2.7.1 · Dec 2023 · source
Dark mode support shipped Provide a dark visual theme option for the interface to reduce eye strain during extended analysis sessions. 1 release · 1 other source · first seen May 2020

release

example

  • Toggle the new dark theme for reduced eye strain during long analysis sessions. Navigate to Settings > Appearance and enable 'Dark Mode'. v1.2.0 · May 2020 · source
Graph-based agent visualization shipped Visualize pivot chains across active agents and perform actions directly from an interactive graph view. 1 other source · first seen Sep 2026

example

  • Visualize pivot chains across your active agents and launch actions without leaving the graph view. In the Dashboard, click the topology panel to open the interactive agent graph. Right-click any agent node to access the context menu: Open, Popout, Execute shell/module, Kill, or Focus. v4.0.3 · Sep 2026 · source
Sponsor dashboard shipped Provide a dedicated dashboard interface for sponsor-tier access and visibility. 1 release · first seen Jul 2023

release

Offline operation support shipped Allow the cyber tooling interface to operate without an internet connection by embedding required dependencies locally. 1 release · first seen Jul 2020

Also counts toward: Offline mode

release

  • Move external fonts to internal dependencies allows Starkiller UI (icons + google font) to function offline use v1.2.4 · Jul 2020 · source · release history

Lines in monospace are the tool's own words: help text parsed from its source, or an endpoint from its API document. Under release, a line is our summary of a dated release. Under docs, it is quoted from the tool's own documentation or website. Each links back to the source it came from.

Score card

  1. Shipping velocity releases a month, last 12 months
  2. Documentation quality release-notes rubric, 0–100
  3. Breaking-change discipline how rarely a release breaks users, and notice given
  4. Maintenance risk quiet time against its own cadence, maintainers
  5. Innovation & surface new capabilities, API and MCP surface
  6. Community health
  7. Contributor trend distinct committers, this year against last
  8. Maintainer concentration bus factor now against a year ago
  9. Issue backlog trend issues closed per issue opened, 12 months
  10. Responsiveness median time to a maintainer’s first reply

Nine scores for starkiller, each built from the releases, notes and API history this site tracks — and, on Researcher and Business, where it stands among every measured tool in its category and how that has moved.

Score cards are part of every paid plan.

See plans →

Each score is 0–100 on a published rubric, derived from data this site already shows. A dimension we cannot measure says so — it is never scored 0 and never enters a rank.

How this is scored
  • Shipping velocity — releases a month over the last 12 months, on a log scale where 16 a month scores 100. Needs 3 releases in the window.
  • Documentation quality — the release-notes rubric published on the analytics page, unchanged.
  • Breaking-change discipline — the share of releases carrying a breaking change (none scores 100, half or more scores 0). Only projects that label breaking changes are measured: a clean record cannot be told from an unlabelled one.
  • Maintenance risk — quiet time measured against the tool's own release cadence (quiet longer than 90 days and three typical gaps scores 0), plus the number of active maintainers and whether contributors are growing, where known. Higher is lower risk.
  • Innovation & surface — new capabilities in the feature ledger this year, API and MCP operations added, and the share of commits that are features: the mean of whichever we hold.
  • Community health (open-source tools only) — each is a direction, not a size: contributors this year against last, the bus factor now against a year ago, and issues closed per issue opened, where steady scores 50, doubled 100 and halved 0; plus the median time to a maintainer's first reply (an hour scores about 100, a month or more 0). A commercial card has no repository and carries none of the four.
  • Documented delivery (commercial tools) — when a vendor's documented new capabilities have slowed against its own baseline, that counts against the overall standing as heavily as two low dimensions. Steady delivery, or too little history to judge, leaves the standing alone; it is never a sixth score.
  • Open-source tools are scored on repository signals; commercial tools on their published changelog. Ranks compare tools within one category and one profile and need at least five measured peers; the overall standing needs three ranked dimensions. Best-in-breed or consolidator is a shape, not a quality, and is never scored.

Release-note detail over time

See how much detail starkiller puts in its release notes, quarter by quarter, and compare it with tracked tools in the same category. This history uses up to ten retained, reviewed notes per tool; sparse or blank older quarters may reflect that limit.

Checking release-note history…

Explore the full chart →

Releases

Show

28 entries

  1. September 20261
  2. August 20262
  3. July 20261
  4. April 20261
  5. February 20261
  6. March 20252
  7. February 20241
  8. December 20231
  9. November 20231
  10. October 20231
  11. September 20231
  12. July 20232
  13. June 20232
  14. February 20231
  15. January 20231
  16. December 20221
  17. September 20211
  18. July 20211
  19. February 20211
  20. July 20203
  21. May 20201
  22. April 20201
    Show

    28 entries

    Project health

    Issue, contributor and maintainer activity in BC-SECURITY/Starkiller, 2023-10 – 2026-09, as of 2026-09-25. Twelve-month figures first; the trend lines run the whole window.

    1. Contributors 3 +1 vs prior 12 months
    2. Maintainers 2 +2 joined · −1 left, last 12 months
    3. Bus factor 1 committers behind half the commits
    4. Community-filed 100% of issues opened, last 12 months
    5. Median time to close 2.6 years first maintainer reply 36 days
    6. Open backlog 2 of 41 issues ever filed
    1. Issues opened / month 0 · 0 communitymaintainers
    2. Open backlog 2
    3. Contributors / month 0
    4. Commits / month 0
    5. Stars 1,689
    Issue themes, last 12 months
    • features 100%

    Counts from the project's public repository and git history; no individuals are identified. Maintainers are the committers covering 80% of the last year's commits. how we measure this

    Libraries its release ships

    What its latest release locks, checked against known advisories.

    None of its release's images build from a lockfile we can read.

    Add the badge to your README

    Maintain this project? The badge links readers straight to this page, so they can follow every release here.

    Tracked by Cyber Toolchain Choose a badge style and copy the code →
    browse all tools → score card for your toolchain →