Base
Hardened build
minimal ports, security patches applied at build time
SecObserve on Ubuntu 24.04
Azure
Security
SecObserve, open source vulnerability management for software development teams, secured on first boot.
Overview
SecObserve is an open source vulnerability management system for software development teams and cloud environments. It gathers results from a wide range of security tools into one place: import findings from SAST, DAST, dependency, secret, infrastructure as code and container scanners such as Trivy, Semgrep, Gitleaks, Grype, Checkov and ZAP, then triage, assess and track observations per product and branch. Components and licenses can be tracked from SBOMs, assessments can be automated with rules and security gates, metrics dashboards show risk over time, and results can be exported as VEX documents in CSAF, OpenVEX and CycloneDX formats.
Why the cloudimg image
cloudimg ships the full open source SecObserve stack, hardened and fully patched, with a bundled PostgreSQL database on a private container network that is never exposed on a host port. Because a vulnerability management system holds your most sensitive security findings, a unique admin password, Django secret key, field encryption key and database password are generated for each VM on first boot, before the web port answers, so the upstream default credentials never exist at any point. A paired step by step deployment guide and 24/7 support are included.
Common uses
- One place to triage findings from SAST, SCA, secret, IaC and container scanners
- Component and license tracking from SBOMs with automated assessment rules
- VEX document export in CSAF, OpenVEX and CycloneDX formats
See it running
Real screenshots taken while testing this image against its deployment guide.
More in Security
2F
2FAuth on Ubuntu 24.04 LTS
Security
2FAuth is a free, open source, self hosted web app for managing your two factor authentication accounts.
addy.io on Ubuntu 24.04
Security
Mail sent to an alias is forwarded to your real inbox, and you can reply from the alias so the other side never learns w...
AliasVault on Ubuntu 24.04
Security
AliasVault is an open source, end to end encrypted password manager combined with a private email alias service that you...
Apache SpamAssassin
Security
This image runs Apache SpamAssassin, the long established open source anti spam platform, fully configured and security ...
Apache Syncope on Ubuntu 24.04
Security
Apache Syncope is an open source identity management and identity governance platform.
Authgear on Ubuntu 24.04 LTS
Security
This image runs Authgear 2026-06-11.0, the open source authentication server and identity provider from Authgear, on Ubu...