safeCodeBox is a toolkit based on kubernetes, to continuously scan your software for security vulnerabilities. Its goal is to automate kubernetes penetration testing in an easy way.
Purpose of the project
The typical way to ensure that your application is secure is to hire a security specialist (also known as a pentester) to check the application for bugs and vulnerabilities. Usually, this test is performed at a later stage of the project but has two major drawbacks:
- Today, many projects are in continuous progress, which means that developers develop new versions several times each day. A pentester is only able to test one version at a time, but a few further additions could bring new problems security. To ensure the continued security of an application, the pentester should also continuously test the application. Unfortunately, such an approach is rarely economically feasible.
- Due to a typically short time resolution, the pentester must focus on trivialities themesecurity issues and therefore probably won't deal with the serious ones.
With the safeCodeBox we have a toolchain for continuous application scanning to find both low-risk security issues and major security issues in a short period of time and without being on top of it all the time computer you and control your project.
By no means safeCodeBox can not replace a pentester. What it does is give you a first look at the security of your project.
important note : The safeCodeBox is not the simple solution that everything is done automatically and with one click!
You need to have a deep understanding and knowledge of security issues and how to configure the scanners it contains. In addition, it is necessary to understand the results of a scan and how to interpret them.
Fast start
You can find many Articles to help you research your site, including instructions on how to to install safeCodeBox and guides to help you perform your first scans .
Architecture overview
Permission
The safeCodeBox code is licensed under it Apache License 2.0.
Information about the installation and use of the program, you will find here.
