Skip to content

pkdev23/CoNum

Folders and files

NameName
Last commit message
Last commit date

Latest commit

Β 

History

15 Commits
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 

Repository files navigation

CoNum - Real-Time File Integrity Monitoring

Stop security incidents before they cost you thousands.

Professional file and code monitoring with 2-second change detection, forensic reports, and instant alerts.

License: MIT macOS Python


Why CoNum?

The Problem: Unauthorized code changes can cost your company thousands in minutes. Traditional monitoring tools take hours to detect and investigate changes. By then, the damage is done.

The Solution: CoNum detects critical file changes in 2 seconds and gives you forensic-grade change reports instantly.

Built For

  • πŸ›‘οΈ Security Operations Centers (SOCs)
  • πŸ‘¨β€πŸ’» DevOps/SRE teams
  • πŸ“‹ Compliance officers (SOC 2, ISO 27001, PCI-DSS)
  • πŸ” Anyone monitoring critical code assets

Use Cases

πŸ” Detect SSH Backdoors

Monitor ~/.ssh/authorized_keys and get alerted within 2 seconds if someone adds an unauthorized key.

βš™οΈ Track Production Config Changes

Know immediately when .env files, nginx.conf, database configs, or deployment scripts are modified.

πŸ“‹ Compliance Auditing

Generate forensic reports for SOC 2, ISO 27001, or PCI-DSS audits showing exactly who changed what and when.

🚨 Incident Response

When a breach happens, CoNum's change history shows exactly which files were compromised and what was changed.

πŸ”„ Deployment Verification

Ensure deployment scripts and infrastructure-as-code haven't been tampered with before running automated deployments.


Screenshots

Active Monitoring with Dashboard

Monitoring

PDF Report - free and pro version

Monitoring


What You Get (Free Version)

Core Monitoring

  • ⚑ 2-Second Detection - Know about changes before they become incidents
  • πŸ“Š Visual Dashboard - See all your monitored files at a glance
  • πŸ”” Email Alerts - Get notified immediately with PDF reports
  • πŸ“ 4 Monitoring Slots - Track up to 4 critical files or directories simultaneously

Smart Tracking

  • 🧬 File Fingerprinting - DNA-based change detection (every byte matters)
  • πŸ“ Complete Change History - Full SQLite database of every modification
  • πŸ“€ CSV Export - Manual export for compliance audits
  • πŸ” Real-Time Monitoring - Watchdog-powered instant detection

Free Version Limits

  • Monitor up to 4 files or directories
  • 1 email recipient per alert
  • Community support via GitHub Issues
  • Non-commercial use only

Perfect for: Personal projects, small teams, trying out file integrity monitoring


πŸš€ Upgrade to CoNum Pro - $249

Enterprise-grade security without enterprise complexity.

CoNum Pro isn't just "more features" - it's the difference between reactive firefighting and proactive security.

Why Teams Choose Pro

πŸ›‘οΈ Enterprise Security Features

  • 16 Monitoring Instances - Scale to your entire critical infrastructure
  • SIEM-Ready Export - Industry-standard formats (JSONL, CEF, CSV)
    • Direct ingestion into Splunk, ELK Stack, QRadar
    • Compatible with Datadog, Sumo Logic, ArcSight
    • Automated file rotation & retention
  • Security Risk Scoring - Automatic 0-10 risk assessment per change
  • Automated Forensic Reports - Court-ready PDF documentation with full change context

πŸ‘₯ Team Collaboration

  • 10 Email Recipients - Alert your entire security team instantly
  • Automated Daily/Weekly Reports - Management summaries
  • Priority Support - <24h response time via email
  • Commercial Use License - Deploy in production environments

πŸ’° Real-World ROI

Average security incident cost: $4.45M (IBM Security Report)
Average detection time without FIM: 277 days  
CoNum Pro detection time: 2 seconds

One prevented incident pays for CoNum Pro 17,951x over.

Perfect For

βœ… Security Operations Centers (SOCs)
βœ… DevOps/SRE teams with compliance requirements
βœ… Companies handling PCI-DSS, SOC 2, ISO 27001
βœ… Teams monitoring 5+ critical assets
βœ… MSSPs (Managed Security Service Providers)

Pricing

  • Single Machine (macOS or Windows): $249 one-time
  • 5-Machine Pack (any platform): $999 (save 20%)

Get CoNum Pro β†’


How CoNum Compares

Feature CoNum Free CoNum Pro Tripwire OSSEC
Price Free $249 one-time $5,000+/year Free
Setup Time 5 minutes 5 minutes Days Hours
Detection Speed 2 seconds 2 seconds Minutes Minutes
SIEM Integration ❌ βœ… βœ… βœ…
Visual Dashboard βœ… βœ… ❌ ❌
Focus Code files Code files OS files OS files
Cross-Platform macOS, Windows macOS, Windows Limited Yes
Learning Curve Minimal Minimal Steep Moderate

TL;DR: Enterprise-grade monitoring without enterprise complexity or cost.


Installation

# Clone repository
git clone https://github.com/pkdev23/conum.git
cd conum

# Install dependencies
pip install -r requirements.txt

# Run application
python conum_rack.py

System Requirements

  • macOS: 11.0+ (Big Sur or newer)
  • Windows: 10/11 (64-bit)
  • Python: 3.11+
  • Dependencies: Tkinter, Watchdog, SQLite3

Quick Start

  1. Launch CoNum
  2. Click "+ Add" to create a monitoring slot
  3. Select file or folder to monitor
  4. Configure email alerts (optional)
  5. Start monitoring
  6. View changes in real-time on dashboard

πŸ“– Detailed Setup Guide


Configuration

Email Alerts Setup

Edit conum_config.json:

{
  "smtp": {
    "host": "smtp.gmail.com",
    "port": 587,
    "username": "[email protected]",
    "password": "your-app-password",
    "use_ssl": false,
    "starttls": true
  },
  "email": {
    "from_address": "[email protected]"
  }
}

For Gmail: Generate an App Password (don't use your regular password!)

For Other Providers: Standard SMTP configuration works for Office365, ProtonMail, etc.


Technical Architecture

  • Language: Python 3.11
  • GUI Framework: Tkinter (native macOS integration)
  • File Monitoring: Watchdog (filesystem events)
  • Database: SQLite with WAL mode (write-ahead logging)
  • Fingerprinting: SHA-256 hashing
  • Storage: Local-only (no cloud dependencies)

Security & Privacy

  • βœ… 100% Offline - No data leaves your machine (except email alerts you configure)
  • βœ… Zero Telemetry - We don't collect any usage data
  • βœ… Local Storage - All change history stays on your device
  • βœ… Open Source - Free version is fully auditable

Documentation

Vote on features: GitHub Discussions


Contributing

Contributions are welcome! Whether it's:

  • πŸ› Bug reports
  • πŸ’‘ Feature requests
  • πŸ“ Documentation improvements
  • πŸ”§ Code contributions

Please read CONTRIBUTING.md before submitting PRs.


Support

Free Version

Pro Version

  • βœ‰οΈ Priority Email Support: [email protected]
  • ⚑ Response Time: <24 hours
  • 🎯 Direct Line: For urgent security issues

License

Free Version: MIT License - see LICENSE file for details

Pro Version: Commercial license - includes:

  • Commercial use rights
  • Priority support
  • Future updates
  • SIEM integration modules

Contact: [email protected] for Pro licensing


Get Started Now

Try Free

git clone https://github.com/pkdev23/conum.git
cd conum && python conum_rack.py

Go Pro

Request Pro License ($249) β†’

Questions? Email [email protected] or open an issue


Author

Paul Kletzl


⭐ If CoNum helped you catch a critical change, please star this repo!

Protecting critical code, one file at a time.

About

Real-time code integrity monitoring with instant change detection

Topics

Resources

License

Contributing

Security policy

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published