Security Automation with Ansible 2

Automation security audit checks for applications using Ansible

Modern applications can get pretty complex fairly quickly. Having the ability to run automation to do security tasks is almost a mandatory requirement. 

The different types of application security scanning we can do can range from the following:

1.  Run CI/CD scanning against the source code (for example, RIPS and brakeman).
2. Dependency checking scanners (for example, OWASP dependency checker and snyk.io (https://snyk.io/)).

 

3. Once deployed then run the web application scanner (for example, Nikto, Arachni, and w3af).
4. Framework-specific security scanners (for example, WPScan and Droopscan) and many other.