What the board has decided about this committee or office, and the reports it filed, most recent first. Generated from the published minutes.
These categorised views are best effort. They are read from the published minutes by a program, and what it can attribute to a committee depends on how each resolution happens to be worded — so a page may be incomplete, and nothing here overrides the minutes themselves. The raw minutes are the source of truth.
Please note. The board approves the minutes of a meeting at the meeting after it, and they are published then - so the most recent meeting is not usually here. ASF Members can read the draft in the board's own repository until it is.
[raw] the published minutes, which are the record. [main index]
Caldera provides a modular platform for modeling, scripting, and executing adversary behavior. It allows users to construct emulation plans, provides agents for communicating with the command and control server, and enables users to evaluate security detections in a structured, scalable, and repeatable way. With the use of plug- ins and community-contributed features, Caldera supports a range of use cases including adversary emulation, purple teaming, detection engineering, and continuous security validation. Using Caldera, defenders can emulate known threat actor behavior and perform other red team activity to evaluate their organization’s defensive capabilities, test analytics, and find detection gaps. As a modular tool based on the MITRE ATT&CK framework, Caldera is designed to be extensible, intelligence-driven, and automation-friendly. Caldera has been incubating since 2025-12-19. ### Three most important unfinished issues to address before graduating: 1. Community Growth 2. Grow the PPMC ### Are there any issues that the IPMC or ASF Board need to be aware of? No. ### How has the community developed since the last report? Petitioned for an additional PPMC member; in process of vetting and voting on them. Github Stars are over 7.2k. ### How has the project developed since the last report? We had 4 new PRs merged and closed on GitHub. Added .asf.yml and NOTICE files to repo. Updated README file. Updated submodule pin references for plugins. We handled 3 software library version updates. ### How would you assess the podling's maturity? Please feel free to add your own commentary. - [X] Initial setup - [ ] Working towards first release - [X] Community building - [ ] Nearing graduation - [ ] Other: ### Date of last release: No Apache release yet. ### When were the last committers or PPMC members elected? At founding/incubation. ### Have your mentors been helpful and responsive? Yes. ### Is the PPMC managing the podling's brand / trademarks? Finalizing third-party references and branding references, including documentation and website references as well as plugin repository mentions and references. ### Signed-off-by: - [ ] (caldera) Kevin Ratnasekera Comments: - [X] (caldera) Francis Chuang Comments: Steady progress is being made. - [X] (caldera) PJ Fanning Comments: - [ ] (caldera) Gordon King Comments: ### IPMC/Shepherd notes:
Caldera provides a modular platform for modeling, scripting, and executing adversary behavior. It allows users to construct emulation plans, provides agents for communicating with the command and control server, and enables users to evaluate security detections in a structured, scalable, and repeatable way. With the use of plug- ins and community-contributed features, Caldera supports a range of use cases including adversary emulation, purple teaming, detection engineering, and continuous security validation. Using Caldera, defenders can emulate known threat actor behavior and perform other red team activity to evaluate their organization’s defensive capabilities, test analytics, and find detection gaps. As a modular tool based on the MITRE ATT&CK framework, Caldera is designed to be extensible, intelligence-driven, and automation-friendly. Caldera has been incubating since 2025-12-19. ### Three most important unfinished issues to address before graduating: 1. Community growth 2. Grow PPMC ### Are there any issues that the IPMC or ASF Board need to be aware of? No. ### How has the community developed since the last report? Petitioned for new PPMC members and in process of vetting and voting on these folks Github Stars has now crossed the 7,000 star mark. ### How has the project developed since the last report? The github repo has transferred and is available under /apache/caldera. The website is stood up and found at caldera.apache.org. 5 Pull Requests have been merged since last report. ### How would you assess the podling's maturity? Please feel free to add your own commentary. - [X] Initial setup - [ ] Working towards first release - [X] Community building - [ ] Nearing graduation - [ ] Other: ### Date of last release: ### When were the last committers or PPMC members elected? At Founding/Incubation ### Have your mentors been helpful and responsive? yes ### Is the PPMC managing the podling's brand / trademarks? Working to update third-party references and branding references. Including documentation and website references as well as plugin repository mentions and references. ### Signed-off-by: - [ ] (caldera) Kevin Ratnasekera Comments: - [X] (caldera) Francis Chuang Comments: The team has made good progress with moving their git repository and website to the ASF. - [ ] (caldera) PJ Fanning Comments: Initial setup is not complete. - [ ] (caldera) Gordon King Comments: ### IPMC/Shepherd notes:
Caldera provides a modular platform for modeling, scripting, and executing adversary behavior. It allows users to construct emulation plans, provides agents for communicating with the command and control server, and enables users to evaluate security detections in a structured, scalable, and repeatable way. With the use of plug- ins and community-contributed features, Caldera supports a range of use cases including adversary emulation, purple teaming, detection engineering, and continuous security validation. Using Caldera, defenders can emulate known threat actor behavior and perform other red team activity to evaluate their organization’s defensive capabilities, test analytics, and find detection gaps. As a modular tool based on the MITRE ATT&CK framework, Caldera is designed to be extensible, intelligence-driven, and automation-friendly. Caldera has been incubating since 2025-12-19. ### Three most important unfinished issues to address before graduating: 1. Caldera GitHub repository needs to be transferred 2. Apache Caldera website needs to be stood up 3. Community growth ### Are there any issues that the IPMC or ASF Board need to be aware of? - Awaiting response from Apache infra team for GitHub repository transfer ### How has the community developed since the last report? - Caldera Discord community growing ~500 users - Caldera GitHub community actively submitting PRs - GitHub stars reached 6.9k ### How has the project developed since the last report? - Preparing for GitHub repository transfer to ASF - Approved 5 PRs from contributors - Caldera WIKI created. Link: cwiki.apache.org/confluence/display/CALDERA ### How would you assess the podling's maturity? Please feel free to add your own commentary. - [X] Initial setup - [ ] Working towards first release - [X] Community building - [ ] Nearing graduation - [X] Other: Awaiting repository transferring (May 20th). ### Date of last release: N/A ### When were the last committers or PPMC members elected? at founding/incubation ### Have your mentors been helpful and responsive? Yes ### Is the PPMC managing the podling's brand / trademarks? No known brand or naming issues. https://issues.apache.org/jira/browse/PODLINGNAMESEARCH-248 approved. ### Signed-off-by: - [ ] (caldera) Kevin Ratnasekera Comments: - [X] (caldera) Francis Chuang Comments: There were some delays with getting the project into the incubator, but the PPMC has made significant progress in the last few months to get the ball rolling. - [X] (caldera) PJ Fanning Comments: There was talk of adding some new named PPMC members but the discussion has not been made official on the private list. - [ ] (caldera) Gordon King Comments: ### IPMC/Shepherd notes:
Caldera provides a modular platform for modeling, scripting, and executing adversary behavior. It allows users to construct emulation plans, provides agents for communicating with the command and control server, and enables users to evaluate security detections in a structured, scalable, and repeatable way. With the use of plug- ins and community-contributed features, Caldera supports a range of use cases including adversary emulation, purple teaming, detection engineering, and continuous security validation. Using Caldera, defenders can emulate known threat actor behavior and perform other red team activity to evaluate their organization’s defensive capabilities, test analytics, and find detection gaps. As a modular tool based on the MITRE ATT&CK framework, Caldera is designed to be extensible, intelligence-driven, and automation-friendly. Caldera has been incubating since 2025-12-19. ### Three most important unfinished issues to address before graduating: 1. 2. 3. ### Are there any issues that the IPMC or ASF Board need to be aware of? ### How has the community developed since the last report? ### How has the project developed since the last report? ### How would you assess the podling's maturity? Please feel free to add your own commentary. - [ ] Initial setup - [ ] Working towards first release - [ ] Community building - [ ] Nearing graduation - [ ] Other: ### Date of last release: XXXX-XX-XX ### When were the last committers or PPMC members elected? ### Have your mentors been helpful and responsive? ### Is the PPMC managing the podling's brand / trademarks? ### Signed-off-by: - [ ] (caldera) Kevin Ratnasekera Comments: - [ ] (caldera) Francis Chuang Comments: - [ ] (caldera) PJ Fanning Comments: No PPMC member or mentor (except me) has yet signed up to any mailing list. I have been told that Mitre Legal team are ready to sign the SGA but the Caldera team email me and refuse to use the lists, despite me constantly telling them to. It may be time to consider having IPMC retire the podling. - [ ] (caldera) Gordon King Comments: ### IPMC/Shepherd notes: Justin Mclean: See discussion on Incubator general list https://lists.apache.org/thread/hmw6zxzc60pktfjk8p2tmn66pzfmvfpw
