RAIN AGPL-3.0
GitHub Repo
Response to Asynchronous Interactions in Networks

Sovereign ITSM and compliance evidence engine

A self-hosted IT system of record built specifically for air-gapped, classified, and controlled operational environments with zero external telemetry or cloud dependencies. No per-seat license restrictions. Clean, patched, up-to-date containers.

User Experience

No need to guess which one of 600 overlapping menus let you see and edit pending changes:

Ticket Detail View

Ticket Detail View

Granular tracking of operational incidents, change requests, and automated event logs.

View image
Platform Response Rules

Response Rules Engine

Define automated rule sets to ingest, pattern-match, and promote incoming network telemetry.

View image
Client Portal

Client Portal

Dedicated stakeholder portal interface featuring scoped ticket access and status widgets.

View image

Why RAIN?

Ask yourself: do you really need a tank to travel to a corner store, or a purpose-built bike works?

Sovereign Operation

Zero cloud licensing servers, external telemetry, or heavy JavaScript bundles. Runs anywhere with zero internet dependency.

Evidence Engine

Auditors check operational artifacts rather than policy papers. Turns live changes and events into verifiable audit trails.

Asynchronous Bus

Ingests raw Syslog feeds, buffers network signals across segments, and automatically promotes critical signals into tickets.

Zero Build Design

Built using Python, FastAPI, Jinja2, and vanilla CSS and JS. Simple maintenance without complex supply chain risks.

Core Capabilities

Customzeable IT Service Management primitives built for high security or isolated environments:

Asset Tracker

Flexible asset management for direct inventory control instead of rigid CMDB setups.

  • Custom dynamic schema and attributes
  • CSV, JSON, Excel, Nessus scan import and export
  • Direct links to tickets and events
  • Multi-tenant asset isolation

Unified Ticketing

Lifecycle management for requests, security alerts, and system changes.

  • Incident, vulnerability, and change tickets
  • Rule-based automated event promotion
  • Multi-tenant approval workflows
  • Client portal with optional public access

Syslog Engine

Native integration bridge connecting security tools directly to operational response.

  • Bring your own SIEM, XDR, and APM tools
  • Regex and pattern matching event rules
  • Automated severity classification
  • Python River ML-based anomaly detection rules

Calendar

Operational scheduling for maintenance windows and routine procedures.

  • Recurring maintenance event tracking
  • Syslog event correlation with windows
  • Tenant-scoped calendar visibility
  • Portal widget for current events

Document Repository

Built-in knowledge base and archive for standard operating procedures.

  • Local or S3 compatible storage backend
  • Automatic daily document refresh
  • Ticket attachments and links
  • Native compliance template library

Audit and Control

Built for strict control framework requirements and regulatory environments.

  • Immutable system action logging and drift detection
  • Customizable group action approvals
  • Local, SAML, and LDAP authentication
  • In-line evidence generation for 3PAOs

Compliance and template mapping

RAIN includes flexible data schema and extension starter templates designed to bridge written security policies with technical operational reality. No coding, simple UI import:

Framework Alignment Coverage

Designed to produce evidence artifacts for major security baselines:

FedRAMP High NIST SP 800-53 ISO 27001:2022 PCI-DSS v4.0 SOX ITGC BSI IT-Grundschutz ANSSI SecNumCloud MAS TRM ITSG-33 ACSC Essential Eight

Repository Resources

Our documentation and implementation guides