safeCodeBox is a kubernetes-based toolkit for persistent void scanning security of software your. Its goal is to automate kubernetes penetration testing in an easy way.
Purpose of the project
The typical way to ensure that your application is secure is to hire a security specialist (also known as a pentester) to check the application for bugs and vulnerabilities. Usually, this test is performed at a later stage of the project but has two major drawbacks:
- Today, a lot projects they make continuous progress, which means developers develop new versions multiple times every day. A pentester is only able to test one version at a time, but some further additions could bring new security issues. To ensure the continued security of an application, the pentester should also continuously test the application. Unfortunately, such an approach is rarely economically feasible.
- Due to a typically short time analysis, the pentester has to focus on minor safety issues and therefore will probably not take it seriously.
With the safeCodeBox We have a chain of tools for continuous application scanning to find both low-risk security issues and major security issues in a short period of time without being on your computer all the time and checking your project.
By no means safeCodeBox can not replace a pentester. What it does is give you a first look at the security of your project.
important note : The safeCodeBox it is not the simple solution that everything is done automatically and with one click!
You need to have a deep understanding and knowledge of security issues and how to configure the scanners it contains. In addition, it is necessary to understand the results of a scan and how to interpret them.
Quick start
You can find many Articles to help you research your site, including instructions on how to to install safeCodeBox and guides to help you perform your first scans .
Architecture overview
Permission
The safeCodeBox code is licensed under it Apache License 2.0.
Information about the installation and use of the program, you will find here.
