Skip to content
02

Control plane

API & Core

The Control plane is the product brain — FastAPI surfaces and secaudit_core orchestration for profiles, AuditFlow, jobs, and reports.

FastAPI provides REST and WebSocket APIs. secaudit_core manages profiles, AuditFlow, jobs, and reports

Where it sits in the stack

  1. 01
    Access layer
  2. 02
    Control plane Focus
  3. 03
    Data and messaging
  4. 04
    Execution layer
  5. 05
    Managed targets
FastAPIRESTWebSocketsecaudit_core

How requests move

  1. 01

    UI or API client sends a request

  2. 02

    FastAPI authenticates and validates input

  3. 03

    secaudit_core applies domain rules

  4. 04

    Work is persisted and queued for workers

What this layer does

  • FastAPI REST for CRUD, scheduling, and exports

  • WebSocket channels for live job and scan status

  • secaudit_core domain logic for profiles and AuditFlow

  • One policy surface for jobs, waivers, and reports

REST endpoints handle create, schedule, and query flows, while WebSockets push live status so operators do not refresh to watch a run.

secaudit_core owns the domain model: imported profiles, discovery tasks, compliance jobs, remediation, waivers, and report delivery.

Everything the UI shows is mediated here, which keeps business rules consistent whether the request came from a click, a schedule, or an API client.

Other layers

Back to Technology
01

Access layer

Operators work in a single PatternFly interface with Keycloak OIDC or local authentication and object-level RBAC

 03

Data and messaging

PostgreSQL stores platform state. Redis Sentinel provides highly available queues, distributed locks, and scheduling

 04

Execution layer

Celery workers execute checks, remediation jobs, discovery scans, and scheduled tasks while streaming logs in real time

 05

Managed targets

Agentless SSH, WinRM, and network protocols connect to Linux, Windows, and network devices