One Click Sec Dev Ops

DevOps tries to ensure all teams involved (dev,ops,security etc) collaborate effectively. In the day and age of multiple deployments per day, Security often becomes a bottleneck. Our solutions aims to assist dev teams to incorporate security into every piece of the puzzle to ensure Security issues are found and dealt with early.

The Problem

• Traditionally, responsibilities were split between Dev and Ops teams
• With DevOps, Devs are now in charge of Ops too
• Traditional security slows DevOps

The Solution?

Codify Security

• Equip developers to take care of security
• Use Ansible to help standardise security activities across environments and applications

1click Secure Servers

A simple level based approach to secure servers while being provisioned.

Advantages

1. Secured test servers on the internet
2. With security already in place, what works on test, works on prod

1click Security Testing

Extensible framework for CLI security tools: Pre-configured, ready to go!

Security Tools Already Configured

1. Security testing for WebApps - Nikto
2. Automated SSL configuration audit - SSLlabs-scan

Ideas for Improvement

We would love to see contributions and improvements, so please fork this repository on GitHub and send us your changes via pull requests.

Built With

• ansible
• linux
• nikto
• sslscan
• ubuntu
• vagrant
• yaml