A design and implementation of open web architecture for cyber situational awareness is disclosed herein. The architecture is user-centric, web-based and service-oriented to increase the flexibility of user dashboard and utilization of third-party provided information and web services. A method disclosed herein includes accessing a gadget workbench including a workflow to be executed by a web gadget. The method also includes interacting a data source with the workflow, interacting an analysis module with the workflow, and interacting a visualization module with the workflow. The method further includes generating the web gadget based on the data source, the analysis module and the visualization module.