Security Scanner FAQs

Question 1

What is Security Scanner?

Accepted Answer

Security Scanner is an intelligent security partner that automatically detects and suggests fixes for security vulnerabilities across all code types, including AI-generated code and Infrastructure as Code (IaC).

Question 2

What types of vulnerabilities does Security Scanner detect?

Accepted Answer

It detects a comprehensive range of issues such as hardcoded secrets, injection flaws (SQL, XSS), cryptographic weaknesses, authentication vulnerabilities, path traversals, vulnerable dependencies, and IaC misconfigurations.

Question 3

Does it offer automated fixes for detected vulnerabilities?

Accepted Answer

Yes, a key feature of Security Scanner is its ability to automatically generate code fix suggestions for identified vulnerabilities, enabling developers to quickly and efficiently remediate issues.

Question 4

Which Infrastructure as Code (IaC) configurations can it scan?

Accepted Answer

Security Scanner provides comprehensive IaC scanning for Dockerfile, Kubernetes YAML, and Terraform configurations, adhering to standards like CIS Docker Benchmark, Pod Security Standards, and multi-cloud best practices.

Question 5

How does Security Scanner ensure secure execution of scans?

Accepted Answer

To protect your host system, Security Scanner can execute all scans within an isolated Docker sandbox environment, applying strict resource limits, network restrictions, and minimal privileges during analysis.

Security Scanner

Security Scanner

概要

主な機能

ユースケース

概要

主な機能

ユースケース