Base
Hardened build
minimal ports, security patches applied at build time
OWASP ZAP
AWS
Azure
Security
2 variations
OWASP ZAP, the open source web application security scanner, running as a headless daemon with its REST API ready.
Variations
Choose the operating system, cloud and version you need. Every variation is the same hardened OWASP ZAP image, built and supported by cloudimg.
Overview
OWASP ZAP (Zed Attack Proxy) is a widely used open source dynamic application security testing scanner. It spiders web applications and runs passive and active scans to find vulnerabilities, and can be driven entirely over an authenticated REST API.
Why the cloudimg image
cloudimg ships ZAP preinstalled and running as a headless daemon with the REST API bound to loopback, and a random API key is generated fresh on first boot so no shared secret ships in the image. A bundled Java runtime, the session database on a dedicated resizable data disk and 24/7 support round out the image.
Common uses
- Dynamic application security testing
- CI/CD security scanning
- Penetration testing workflows
More in Security
CrowdSec
Security
CrowdSec, a collaborative behavioural security engine, preinstalled and blocking malicious IPs within minutes of launch.
CyberChef
Security
CyberChef, the cyber swiss army knife, a purely client side toolkit for encoding, encryption and data analysis, served t
De
DefectDojo
Security
DefectDojo, application vulnerability management, ready to track findings on first boot.
KeePass
Security
KeePass on Windows Server for self hosted password management with AES 256 encrypted databases, no cloud dependency.
LLDAP
Security
LLDAP, a lightweight, self hosted authentication server with an LDAP interface and a friendly web admin UI.
Ollama GPU-Accelerated
Security
Ollama, the open source LLM server, exposing a private GPU accelerated OpenAI compatible API within minutes of launch.