secureCodeBox
Security testing orchestration platform that runs multiple open-source scanners against your applications and infrastructure from one pipeline.
- Actively maintained
- Well documented
- Permissive license
Overview
secureCodeBox coordinates a collection of established open-source security scanners - for web apps, APIs, containers, and infrastructure - behind one consistent interface, running them as Kubernetes jobs and normalizing their findings into a common format. Instead of wiring together many separate scanning tools by hand, a team defines a scan pipeline once.
secureCodeBox is a fit for security and platform teams that want continuous, automated security scanning across a stack without maintaining glue scripts for each individual scanner - complementing Trivy (also in this catalog), which focuses specifically on vulnerability and misconfiguration scanning rather than orchestrating a broader mix of scanner types.
Why it's in this catalog
Catalog rating: ★★☆☆☆ (2/5)
Kubernetes-native security-testing orchestration, a narrower niche within testing.
- Emerging
- Community-driven
- Categories
- Testing
- Languages
- Go, TypeScript
- License
- Apache-2.0
Related Projects
Playwright
Apache-2.0Reliable end-to-end testing and browser automation framework for modern web apps.
Actively maintained
- Developer Tools
- Testing
Chaos Mesh
Apache-2.0Cloud-native chaos engineering platform for Kubernetes that injects controlled faults - pod, network, I/O, and more - to test how a system actually behaves under failure.
Actively maintained
- Testing
Cypress
MITJavaScript end-to-end testing framework built for the modern web with fast, reliable testing.
Actively maintained
- Testing
kube-bench
Apache-2.0CIS Kubernetes Benchmark compliance checker that audits a cluster's configuration against official security best practices.
Actively maintained
- Testing
Spotted an error? Suggest an edit on GitHub.