Re:Show HN: Receive Alerts when your Server's software has S...
by evadne on Saturday December 16, 2017 @10:51AM
(#15940034)
My company uses http://appcanary.com and recently GitHub has introduced a similar feature https://github.com/blog/2470-introducing-security-alerts-on-...
[ Parent
| on HN ]
Re:Show HN: Receive Alerts when your Server's software has S...
by joantune on Saturday December 16, 2017 @10:55AM
(#15940058)
I searched and I did not know about them. Thanks for letting me know. These are actually the first paying service I have seen on this (at least the server side, I had seen it for webapps).
I'll probably start out with Java/Scala on the webapp side and on the server side I'm thinking of an easy to use support for Kubernetes and Rancher OS. If that's more around your ally subscribe there on the website or here.
I'm curious on what is your company, regardless, any pain points that you might have noticed while using AppCanary, or suggestions on SecureIT?
Re:Show HN: Receive Alerts when your Server's software has S...
by evadne on Wednesday December 20, 2017 @09:57PM
(#15976044)
Usually they would like to install a daemon which checks local packages and all Gemfiles for example. The problem would be in ensuring that the daemon does not misbehave. A solution which gets integrated into a CI/CD pipeline would not have this problem but it would not be able to provide assurance on the integrity of the base system, only the artefact (deliverable).