# HenKaiPan

> HenKaiPan is an Application Security Posture Management (ASPM) platform that centralizes security scans, findings, vulnerability intelligence, policy automation and AI-assisted remediation in one place.

Agents can also interact with the platform directly through its MCP server at `/v1/mcp`.

## Docs

### Self-Hosted
- [Quickstart](https://henkaipan.dyallab.com.ar/docs/quickstart.md): Install and run HenKaiPan with Docker Compose or Kubernetes, plus configuration and AI provider setup.
- [Kubernetes Deployment](https://henkaipan.dyallab.com.ar/docs/kubernetes.md): Production Kubernetes deployment using the all-in-one manifest.
- [Backup & Restore](https://henkaipan.dyallab.com.ar/docs/backup.md): Backup and restore procedures for the HenKaiPan PostgreSQL database.
- [Production Deployment](https://henkaipan.dyallab.com.ar/docs/production.md): Production hardening checklist: TLS, security, environment configuration, backups and monitoring.
- [Operations Guide](https://henkaipan.dyallab.com.ar/docs/operations.md): Operational guidance for worker scaling, scanner requirements and routine maintenance.
- [SSO with Authelia](https://henkaipan.dyallab.com.ar/docs/sso-authelia.md): Configure OIDC single sign-on with Authelia, including a Docker Compose walkthrough.

### CI/CD
- [GitHub Actions](https://henkaipan.dyallab.com.ar/docs/github-actions.md): Connect HenKaiPan security scans to a GitHub Actions pipeline.
- [GitLab CI](https://henkaipan.dyallab.com.ar/docs/gitlab-ci.md): Connect HenKaiPan security scans to a GitLab CI pipeline.
- [Jenkins](https://henkaipan.dyallab.com.ar/docs/jenkins.md): Connect HenKaiPan security scans to a Jenkins pipeline.
- [CircleCI](https://henkaipan.dyallab.com.ar/docs/circleci.md): Connect HenKaiPan security scans to a CircleCI pipeline.
- [Docker](https://henkaipan.dyallab.com.ar/docs/docker.md): Run HenKaiPan scans from a Docker-based CI job.
- [CI/CD Quickstart](https://henkaipan.dyallab.com.ar/docs/ci-cd-quickstart.md): Quick reference for triggering HenKaiPan scans from external CI/CD.

### User Guide
- [Introduction](https://henkaipan.dyallab.com.ar/docs/user-guide/01-introduction.md): Overview of HenKaiPan capabilities, navigation and quick-start workflow.
- [Dashboard](https://henkaipan.dyallab.com.ar/docs/user-guide/02-dashboard.md): Unified dashboard metrics, severity distribution and recent activity.
- [Findings](https://henkaipan.dyallab.com.ar/docs/user-guide/03-findings.md): Finding lifecycle, triage workflow, SLA deadlines and status tracking.
- [Scans](https://henkaipan.dyallab.com.ar/docs/user-guide/04-scans.md): Scanner execution, batching and scan result review.
- [Projects](https://henkaipan.dyallab.com.ar/docs/user-guide/05-projects.md): Create and manage security projects connected to repositories.
- [Compliance](https://henkaipan.dyallab.com.ar/docs/user-guide/06-compliance.md): SOC 2, ISO 27001 and PCI-DSS control mapping and evidence export.
- [Settings](https://henkaipan.dyallab.com.ar/docs/user-guide/07-settings.md): Platform settings including users, teams, roles and API tokens.
- [Knowledge Center](https://henkaipan.dyallab.com.ar/docs/user-guide/08-knowledge.md): Curated remediation guides and AI-generated articles.
- [Reports](https://henkaipan.dyallab.com.ar/docs/user-guide/09-reports.md): Executive reports with trends, risk scores and SLA compliance.
- [System](https://henkaipan.dyallab.com.ar/docs/user-guide/10-system.md): System health, audit log and administrative operations.

### Architecture
- [MCP Integration](https://henkaipan.dyallab.com.ar/docs/architecture/mcp-integration.md): How LLMs and AI agents connect to HenKaiPan through the Model Context Protocol server.
- [Queue Architecture](https://henkaipan.dyallab.com.ar/docs/architecture/queue-architecture.md): Redis + Asynq background job lifecycle, retries and event flow.
- [CI/CD Integration](https://henkaipan.dyallab.com.ar/docs/architecture/ci-cd-integration.md): Architecture and data flow of the external CI/CD scan API.

## MCP / Agents
- [MCP Integration guide](https://henkaipan.dyallab.com.ar/docs/architecture/mcp-integration.md): How to connect Claude Desktop, Cursor, OpenCode and other MCP clients.
- [MCP tools spec](https://henkaipan.dyallab.com.ar/docs/mcp-tools.json): Machine-readable JSON catalog of all MCP tools.

## Optional
- [GitHub](https://github.com/dyallab/henkaipan): Source repositories and self-hosted deployment.
- [Docs llms.txt](https://henkaipan.dyallab.com.ar/docs/llms.txt): Documentation-scoped index covering everything under /docs/.