Documentation
How to install Stackurity, connect your servers, repositories and clusters, read its priorities, fix what it finds and run it in production. The same pages are in the repository.
Getting started
- Install and operate
Stackurity runs as one container plus PostgreSQL.
- Outbound network access
Stackurity has no telemetry.
- Compatibility
What each release runs on and what it can assess.
- Running a pilot
A pilot answers one question.
Using Stackurity
- How priorities are decided
Every open finding gets a priority from P1 (most urgent) to P4, an SOS flag for the few that should page someone, and acknowledgement and fix deadlines.
- Controlled remediation
Stackurity can apply security updates, but only within limits you set.
- Verification
How Stackurity's claims are tested, written in answer to an external review that asked for proof rather than documentation.
- Stack packs
A stack pack teaches Stackurity to read one technology's dependency files.
- Collector plugins
Plugins add inventory sources that Stackurity doesn't ship, such as an appliance API, an internal service registry or a cloud you use.
- Kubernetes
The kubernetes plugin answers four questions about a cluster.
- AI assistants (MCP)
Stackurity is a Model Context Protocol (MCP) server.
- Slack app
With a Slack app configured on the server, people connect Slack in two clicks.
Operating
- Alerts, runbooks and drills
How to watch a Stackurity installation, what each recommended alert means and what to do about it, and drills for the failures that matter most.
- Reliability of background work
A Stackurity server can stop at any moment.
- Asset and project limits
An instance administrator can limit how many assets each organisation (workspace) monitors and how many projects it has, make an organisation read-only, and shorten its reports.
- Editions
What Community, Pro and Enterprise include, their limits and what each capability needs before it works.
Reference
- API guide
Base path.
- API reference (OpenAPI)
Every operation, its parameters and responses, from the OpenAPI description.
- Security review
This page covers PRD FR-18.