ShipSec Studio

The no-code security automation studio for security teams. Design reliable and reusable security workflows.

ShipSec Studio is a security workflow orchestration platform that combines the power of visual programming with enterprise-grade reliability. Unlike traditional automation tools that require complex scripting, ShipSec Studio lets you build security workflows through an intuitive canvas while maintaining the robustness your team needs.

Demo

Click to watch the demo (hosted on Hacking Simplified YouTube)

Why ShipSec Studio?

🎨 Visual Workflow Builder : Design security automations with drag-and-drop, no coding required

⚡ Real-Time Execution : Watch workflows run live with streaming logs and progress indicators

🧩 Pre-Built Security Components : Subfinder, DNSX, HTTPx, Nuclei, and more ready to use

🔒 Enterprise Reliability : Built on Temporal for durable, resumable workflow executions

🛡️ Secure by Default : Encrypted secrets, role-based access, and audit trails

💻 Run Anywhere : Cloud hosted or self-hosted on your own infrastructure

📅 Scheduled Workflows : Schedule your scans to run at specific times or intervals

🔗 Codify Your Workflows : Trigger workflows via a simple POST request, through cURL, python etc.

Quick Start

Get started with ShipSec Studio in minutes:

Option 1: Use the Hosted Platform

1. Sign up at studio.shipsec.ai
2. Create your first workflow using the visual builder
3. Run a scan with pre-built components like Subfinder, Nuclei, or HTTPx
4. View results in real-time as the workflow executes

Option 2: Self-Host with Docker (Recommended)

The easiest way to run ShipSec Studio on your own infrastructure:

Prerequisites

• docker - For running the application and security components
• just - Command runner for simplified workflows
• curl and jq - For fetching release information

Quick Start

# Clone the repository
git clone https://github.com/ShipSecAI/studio.git
cd studio

# Download the latest release and start
just prod start-latest

# Visit http://localhost:8090 to access ShipSec Studio

This command automatically:

• Fetches the latest release version from GitHub
• Pulls pre-built Docker images from GHCR
• Starts the full stack (frontend, backend, worker, and infrastructure)

Other Commands

just prod stop      # Stop the environment
just prod logs      # View logs
just prod status    # Check status
just prod clean     # Remove all data

Option 3: Development Setup

For contributors who want to modify the source code:

Prerequisites

• bun.sh - Fast JavaScript runtime and package manager
• docker - For running security components in isolated containers
• just - Command runner for simplified development workflows

Setup

# Clone the repository
git clone https://github.com/ShipSecAI/studio.git
cd studio

# Initialize (installs dependencies and creates environment files)
just init

# Start development environment with hot-reload
just dev

# Visit http://localhost:5173 to access ShipSec Studio

Your First Workflow

1. Open the Workflow Builder from the dashboard
2. Add a Manual Trigger node for manual execution
3. Add a Subfinder node for subdomain discovery
4. Run the workflow and watch real-time execution

🎉 Congratulations! You've just run your first security workflow in ShipSec Studio.

🔎 System Architecture

🔥 Latest Updates

• Dec 11, 2025 - Execution Canvas Improvements - Enhanced drag-and-drop experience
• Dec 10, 2025 - Modernized Documentation - Updated terminology and cleaner structure
• Dec 9, 2025 - Backend Version Check - Automatic compatibility verification on startup
• Dec 8, 2025 - Workflow Scheduling - Schedule workflows to run at specific times or intervals

Documentation

📚 Complete documentation is available at docs.shipsec.ai

• Getting Started Guides
• Component Development
• API Reference
• Architecture Overview
• And much more...

Community

Join the ShipSec community to get help, share ideas, and stay updated:

• 💬 Discord — Chat with the team and community
• 🗣️ Discussions — Ask questions and share ideas
• 🐛 Issues — Report bugs or request features
• 🐦 Twitter — Follow for updates and announcements

Contributing

We're excited that you're interested in ShipSec Studio! Whether you're fixing bugs, adding features, improving docs, or sharing ideas — every contribution helps make security automation more accessible.

See CONTRIBUTING.md for guidelines.

License

ShipSec Studio is licensed under the Apache License 2.0.

Built with ❤️ by the ShipSec AI team