AquaSec Container Security Solution ( DevSecOps )

AquaSec Container Security Solution ( DevSecOps ) - A quickView

What is AquaSec?

The Aqua Platform is the leading Cloud Native Application Protection Platform (CNAPP) and provides prevention, detection, and response automation across the entire application lifecycle to secure the supply chain, secure cloud infrastructure, and secure running workloads wherever they are deployed.

Solutions :

Cloud Native Security Platform
CSPM Cloud Security
Container Security
Kubernetes Security
Serverless Security
Cloud VM Security
Dynamic Threat Analysis (DTA)
Container Vulnerability Scanning

Aquasec offers a 14days trial to learn the container security / Automated DevSecOps. Use this link to get free trail Sign In | Aqua (aquasec.com)

How to start with AquaSec?

Once login into the portal click the nine dots in the left-side top > Aqua Hub

Then click the "Integrations"

The Integration page has a lot of options to connect your container Platform

Choosing your platform provides the required key to integrate. (follow the OEM documents )

Then Click the "Image scanning" > Images > Add images

(Able to scan the local image by uploading directly by clicking the icon next to 'Add Image')

Chose your registry from the dropdown menu and then search for the images and chose the version which you want to scan and click ADD. Immediately AquaSec starts to scan the image.

Once Scan is done. click the Image from the repository list to see the "Risk/vulnerability/malware" findings by AquaSec Scanner.

Download the sample report: Aqua Enterprises.pdf

We are able to do DevSecOps automation with AquaSec scanner by integrating with CI/CD pipeline. We will learn advanced setups in upcoming blogs.

Comments

My Life as Information security engineer Chapter 1: Tools

Hi folks, here I am going to share the tools list that I am using in my daily life cycle. NMAP Nmap (“Network Mapper”) is a free and open-source (license) utility for network discovery and security auditing. Basically, I will use it to discover the open ports and closed ports where I did Port Mapping in firewalls. We can use this in the local network as well as in the WAN network. Also with help of the NSE script, we do multiple things like vulnerability check, exploitation, etc., Ref: http://www.piratesshield.com/2017/11/nmap-network-mapper-securtiy-scanner.html CURL and WGET curl is a tool to transfer data from or to a server, using one of the supported protocols (HTTP, HTTPS, FTP, FTPS, SCP, SFTP, TFTP, DICT, TELNET, LDAP or FILE). Normally using this tool to analyze the website headers when my web security device blocking some dynamic content websites and to create the Application signature in IPS. Wget using to download files directly instead of opening and surfing the brow

Learn DevOps like a pro techie - PART 1

Usually, all DevOps trainers advise you to set up the LAB environment on cloud platforms (AWS, Azure, GCP, etc). But if you understand the technologies you can set it up easily on your super PC. PC REQUIREMENTS : (WARNING!) Processor : > = i3 (10th or 11th Gen) RAM : 8GB (minimum) Storage : SSD preferred TIPS: If you using win11 or win10 and performance is very slow means use the below script. Windows 11 only: https://github.com/builtbybel/ThisIsWin11 Windows 10 only: https://github.com/builtbybel/bloatbox The LAB mainly depends on the docker platform. So First, start learning the basics of Docker. Docker Basics: https://www.tutorialspoint.com/docker/index.htm KNOWLEDGE REQUIRED - Linux Knowledge (5/10) (installation of apps, editing scripts, user privileges, and troubleshooting) - Web Development (3/10) - Google Search and Stackoverflow (9/10)....... he he he......... UTILITY TOOLS AND PRE-REQUISITES - Install Window Terminal Preview

PIRATESSHIELD

Search This Blog