Build open-appsec Based on Source Code

open-appsec Source Code (GitHub)

As open-appsec is open source you can build/compile its different software components yourself based on the available sources.

The different source code repos are available in the open-appsec GitHub account: https://github.com/openappsec

Available open-appsec Source Code Repositories

Here's a list of open-appsec software components and the corresponding source code repos. In each of the repos you find instructions how to build software and if relevant also the containerized version yourself, deployment instructions where relevant as well as the license information.

open-appsec Agent

This is the main open-appsec software running as the open-appsec agent. It contains the contextual machine learning engine.

The source code for the open-appsec software is available in this repo:

GitHub - openappsec/openappsec: open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.GitHub

In the README.md you will find instructions how to

• build the installation package

• build a corresponding container image

• install it

open-appsec Attachment

open-appsec Attachments connect between processes that provide HTTP data and the open-appsec Agent security logic.

The source code for the open-appsec attachment is available in this repo:

GitHub - openappsec/attachment: Attachments connect between processes that provide HTTP data and the open-appsec Agent security logic.GitHub

In the README.md you will find instructions how to

• build the attachment suitable for your specific environment (OS, NGINX version, Platform)

• build a container image enhanced with the open-appsec attachment for an existing nginx container

• deploy it to NGINX / Kong

smartsync Service (relevant for K8s only)

open-appsec smartsync service is in charge of correlating learning data from multiple agent instances and delivering a unified learning model for each asset.

The source code for the open-appsec smartsync service is available in this repo:

GitHub - openappsec/smartsync: smartsync service is in charge of correlating learning data from multiple agent instances and delivering a unified learning model for each asset.GitHub

In the README.md you will find instructions how to

• build the smartsync service

• build a container image for the smartsync service

smartsync-shared-files Service (relevant for K8s only)

open-appsec smartsync-shared-files service provides an interface to physical storage used by smartsync service for storing learning data. The source code for the open-appsec smartsync-shared-files service is available in this repo:

GitHub - openappsec/smartsync-shared-files: smartsync shared files service is in charge of providing shared file storage services for open-appsec smartsync service.GitHub

In the README.md you will find instructions how to

• build the smartsync-shared-files service

• build a container image for the smartsync-shared-files service