DDactic DDoS Resilience Testing Platform

DDactic is a distributed platform for testing DDoS resilience and broader attack surface exposure. It orchestrates bot instances across 19 cloud providers through a custom Go-based deployment engine, using both spot and on-demand instances to run large-scale traffic and reconnaissance tests. The platform runs a multi-stage reconnaissance pipeline (subdomain discovery, port scanning, L7 protocol analysis across HTTP/1.1, HTTP/2, HTTP/3, gRPC, and WebSocket, mobile/desktop app analysis, breach database cross-referencing, and AI-based analysis) to map an organization's exposed attack surface before generating attack test plans. It includes a TLS fingerprint engine that constructs TLS handshakes to mimic real browser fingerprints (JA3/JA4/JA4H) from a database of over 10,000 browser profiles, intended to evaluate how WAFs and CDNs respond to disguised bot traffic. It also performs automated CDN origin bypass discovery across major CDN vendors, validating whether origin servers are reachable directly and generating firewall mitigation rules. A self-healing fleet management system monitors spot instance terminations across 5 spot-capable cloud platforms and automatically redeploys replacement instances to maintain fleet capacity. Certificate Transparency log monitoring with multi-source failover and caching supports subdomain discovery at scale. Beyond individual assessments, DDactic runs industry-wide batch scans across 19 industry verticals using AWS Batch for parallel processing, generating market-wide vulnerability benchmarks. Fleet coordination is handled through redundant, load-balanced Fleet Controllers communicating over HTTP/2 with agents proxied through Cloudflare.