SkausWatch for Engineers
A single Cargo workspace of Rust services with a consistent REST/gRPC surface, Helm-only deployment, and sqlx-managed schema migrations.
Pain points
- Security tooling built across mismatched languages and frameworks is harder to operate and extend.
- Deploy tooling that only half-supports Kubernetes forces teams to maintain two deployment paths.
- Hand-maintained API specs drift from the actual implementation over time.
How SkausWatch helps
- 12 Rust services on axum (REST) and tonic (gRPC), sharing internal crates for auth, streams, identity, and telemetry — one toolchain, one workspace. (Single Rust Platform)
- The Scanner service shows the platform's async worker pattern: Valkey Streams consumer groups and its own sqlx-migrated schema. (Attack Surface Management)
- Ships as a Kubernetes DaemonSet Helm chart or a systemd unit, both from the same Rust codebase. (Endpoint Agent)
- Vault's envelope-encryption crate is shared with other services rather than reimplemented per service. (Vault (Licensed Add-on))