Network security tools
that get out of your way.

Open-source utilities for security teams who manage firewall policies and need visibility into what web apps actually do.

EDL Manager GhostHunter
Self-Hosted

KineticLull EDL Manager

Create, manage, and serve External Dynamic Lists without direct firewall access. Analysts update EDLs through a web UI; firewalls pull them automatically.

⚙

No Firewall Logins

Security analysts manage EDLs independently. No PAN admin credentials needed, no change windows for simple list updates.

🔒

ACL-Gated Serving

Each EDL has its own access control list. Only your firewalls' source IPs can pull the list content.

✉

API Inbox

Teams submit EDL entries via API. Submissions land in an inbox for admin review before going live.

📋

Audit Trail

Per-entry attribution tracks who added what and when. Know exactly how your EDL got to its current state.

KineticLull EDL dashboard showing list of External Dynamic Lists with names, URLs, and domain entries

EDL dashboard with live URLs and entry previews

KineticLull activity log showing timestamped EDL access events with user, action, and target details

Activity log with searchable audit trail and CSV export

KineticLull system upgrade page showing current version and update status

Built-in version management and upgrade checks

GitHub Repo
Browser Extension

GhostHunter

See every domain a web application talks to. Build precise allow-lists for your firewalls and proxies instead of guessing or over-permitting.

👁

Full Domain Visibility

Captures every background request - CDNs, analytics, APIs, ads - so you see the complete picture of what a site depends on.

🛠

Policy-Ready Output

Export captured domains directly into firewall or proxy rules. No more manually sniffing traffic with dev tools.

🌐

Chrome & Firefox

Available on both the Chrome Web Store and Firefox Add-ons. Same functionality, same workflow.

🔗

Pairs with KineticLull

Discover the domains, then push them into a KineticLull EDL. A complete workflow from discovery to enforcement.

GhostHunter popup showing captured domains from a Google browsing session

Live domain capture as you browse

GhostHunter API configuration with KineticLull server address and API key fields

Connect directly to your KineticLull instance

GhostHunter with Copy button highlighted showing one-click domain list export

One-click copy for quick export

Chrome Web Store Firefox Add-ons

Get Started

KineticLull is a Django app you self-host. GhostHunter installs from your browser's extension store. Both are open source under MPL-2.0.

1

Install GhostHunter

Add the extension to Chrome or Firefox. Browse to any web app and see what domains it contacts.

2

Deploy KineticLull

Clone the repo, run setup.sh, and you have a running EDL server with SSL and systemd services.

3

Build Your EDLs

Create lists in the web UI or submit via API. Point your firewalls at the auto-generated URLs.

Why KineticLull?

Kinetic - energy in motion. Lull - a pause in activity. Security work doesn't have to mean constant effort. Automate the repetitive, simplify the complex, and let the tools carry the weight so you can focus on what actually matters.