Uleska Official Toolkits

To get you up and running quickly, we provide two Uleska Official Toolkits to handle static and dynamic testing of your code and running applications.

We call these Code and Web - Code will look at your source code, statically analyse your Dockerfiles, and check any dependencies, where Web will use a URL you provide us to dynamically probe and poke a running application to check for vulnerabilities.

Official Toolkit: Uleska Code Scan

The Code Scan toolkit contains the following Open-source tools:

• Bandit
• SonarQube Scanner
• OWASP Dependency-Check
• Clair

Official Toolkit: Uleska Web Scan

The Web Scan toolkit contains the following Open-source tools:

• SSLyze
• Nikto2
• ZAPROXY

To get using these tools, follow the instructions in Testing your Application with a Toolkit, and select one of the Official Toolkits from the popup.