It aims for the following goals:
Features
Static analysis:
Multiple AV scanner which includes major antivirus vendors:
Vendors | status | Vendors | status
—|—|—|—
Avast | ok | FSecure | ok
Avira | ok | Kaspersky | ok
Bitdefender | ok | McAfee | ok
ClamAV | ok | Sophos | ok
Comodo | ok | Symantec | ok
ESET | ok | Windows Defender | ok
Installation
Saferwall take advantage of kubernetes for its high availability, scalibility and the huge ecosystem behind it.
Everything runs inside Kubernetes. You can either deploy it in the cloud or have it self hosted.
To make it easy to get a production grade Kubernetes cluster up and running, we use kops. It automatically provisions a kubernetes cluster hosted on AWS, GCE, DigitalOcean or OpenStack and also on bare metal. For the time being, only AWS is officially supported.
Steps to deploy in AWS: (This still needs to be improved)
git clone https://github.com/saferwall/saferwall
build-essential
are installed: sudo apt-get install build-essential
.example.env
to .env
and fill the secrets according to which AVs you want to have.make saferwall
.Built with:
Current architecture / Workflow:
Here is a basic workflow which happens during a file scan:
Acknowledgements
Contributing
Please read docs/CONTRIBUTING.md for details on our code of conduct, and the process for submitting pull requests to us.