AWS SAM
Analyse the configuration of your AWS Serverless Application Model files.
VISUALIZE | UNDERSTAND | SECURE
Develop Better, Faster,
More Secure
Serverless-Applications
Visualize, understand and secure your Serverless Infrastructure with every change.
Automated AWS Resource Diagrams
Visualize your Infrastructure with Every Change
CodeShield generates easy to understand architecture diagrams directly from your SAM and CloudFormation files and source code.
Providing accurate information for troubleshooting, security analysis, or verifying implementations.
To provide detailed insights, CodeShield applies static-analysis to track the data flow between your Serverless functions and the cloud infrastructure.
Visualize your infrastructure
OWASP SAS-10 Security Analysis
Follow your Data within your AWS Infrastructure - Across Events, Lambdas, and Tables.
Know your sensitive data-flows better than your attacker. Detect event-data injections during development.
CodeShield discovers OWASP SAS-10 vulnerabilities even if they span across multiple functions. Vulnerabilities are visualized in your architecture and your code.
Scan for OWASP-SAS 10
Open-Source Security
Manage your Open-Source Dependencies
Get informed about known vulnerabilities in used open-source software immediately.
CodeShield detects known vulnerabilities (CVEs) in the used open-source software, assesses their risk, and suggests updates.
Secure OSS Dependencies
Supports your Technologies
AWS CloudFormation
Analyse the configuration of your AWS CloudFormation files.
Java
Run code analysis on your Java source-/bytecode.
Node.js
Run code analysis on your node.js code.
GitHub
Integrate with GitHub.
Our Recent Posts
This article is part one of a series on how to prevent code injection attacks against Serverless applications using AWS Web application firewalls.
We released an Java adaption of the OWASP Serverless Goat in our GitHub Repo.
In this article, we explain the myth behind false positives and discuss two types of false positives.
Jetzt wo die Corona-App offiziel veröffentlicht ist, dürfen wir über unsere Ergebnisse sprechen.
Supported By
