Hardened OWASP ZAP & Vulnerability Scanners

This is a repackaged open source software product wherein additional charges apply for security hardening, secure-by-default configuration and per-instance setup.

What cloudimg adds to every version

• Every image is built by cloudimg on a fully patched base with the latest security updates applied at build time.
• Services ship secure by default: administrator passwords, database credentials and application secrets are generated uniquely on the first boot of each instance, so no default login exists and no two instances share a secret.

Included products

• Apache SpamAssassin 1.0
• Checkov 1.0
• Clair 4.9.0
• DefectDojo 3.0.100
• Dependency-Track 5.0.2
• Gitleaks 8.30.1
• GUAC 1.1.0
• KICS 2.1.20
• MobSF 4.5.1
• OpenSCAP 1.3.9
• OSV-Scanner 2.4.0
• OWASP Amass 5.1.1
• OWASP Dependency-Check 12.2.2
• OWASP ZAP 2.17.0
• Prowler 5.35.0
• SecObserve 1.56.0
• Sirius Scan 1.1.0
• Subfinder 2.14.0
• Trivy 0.71.2
• VulnerableCode 40.0.1
• Wapiti 1.0
• Web Check 2.2.2

Network and access defaults

• Internal services such as databases and caches are bound to localhost, and each product's guide covers enabling HTTPS, the ports it needs and day-two operations.

This listing is a collection of separate AMIs, one per product and version, chosen from the Software version dropdown at launch.

Support

cloudimg provides 24/7 technical support for every version in this listing by email and live chat, 365 days a year, with a 24-hour response SLA: support@cloudimg.co.uk.

Trademarks

All product names are trademarks of their respective owners. cloudimg is not affiliated with or endorsed by any of them.