Ukuthembela okunonya kusebenzisa iskripthi sako sokufaka ngesikhathi unjiniyela ethayipha ukufaka, isikhathi eside ngaphambi kokuba noma ubani azi ukuthi kunonya. Izikena zakho zekhodi zazibheke indawo yokugcina. Amathuluzi akho okugcina abone inqubo, hhayi iphakheji. Isivikelo sihlala endaweni yokugcina yonjiniyela futhi siyayivimba ngaphambi kokuba sisebenze.
I-ejenti eyodwa elula · Iziteshi zomsebenzi, amaseva kanye nabagijimi be-CI · Inqubomgomo iphathwa ngaphakathi
Vimbela ukuncika okunonya kanye nezikripthi ukuthi zingaze zisebenze ngokuvikela ama-endpoints onjiniyela lapho kuqala khona ukuhlaselwa.
I-Shield ivimba ukufakwa kwamaphakheji ngesikhathi sangempela futhi iwahlole ngokumelene nobuhlakani be-malware be-Xygeni. Amaphakheji anonya ayavinjelwa ngesikhathi sokufakwa, awamakwa embikweni ngakusasa ekuseni. Lokhu kusebenza nakunethiwekhi: ukuxhumana nengqalasizinda eyaziwayo enonya kuyanqanyulwa ngaphambi kokuba noma yini iphume emshinini.
Chaza imithetho kanye bese iShield iyisebenzisa kuwo wonke umshini enhlanganweni yakho: ubudala obuncane bephakheji, uhlu lokuvumela nokwenqaba, amarejista avunyiwe, kanye nezindawo zethrafikhi eziphumayo.
Uma into ebalulekile ifika endaweni yokugcina, iShield inganqamula ukuxhumana kwenethiwekhi yalowo mshini, ngokuzenzakalelayo noma ngokufunwa, ngakho-ke lesi sigameko siphelela kwi-laptop eyodwa esikhundleni sokusabalala enhlanganweni.
I-Runtime Firewall ye-Developer Endpoint.
Konke ukufakwa kwephakheji kuyavinjelwa futhi kuqinisekiswe ngesikhathi sangempela. Isexwayiso sangaphambi kwesikhathi se-malware se-Xygeni sibamba amaphakheji anonya amathuluzi asekelwe edumeleni asawathemba, ngaphandle kokulinda i-CVE, iseluleko, noma isiginesha eshicilelwe. Ukuvimba kwenzeka ngaphambi kokuba iskripthi sokufaka sisebenze.
Ukuhlaselwa kweketanga lokuphakelwa okusheshayo kufika ngezinguqulo zephakheji ezintsha sha. I-Shield ikuvumela ukuthi uvimbele amaphakheji ashicilelwe muva nje kunomkhawulo wakho, usethe umthetho womhlaba wonke futhi uwushintshe ngokwesimiso sezinto eziphilayo, bese unquma ukuthi kwenzekani lapho usuku lokushicilelwa lungatholakali: xwayisa futhi uvumele, noma vimba.
Nquma ukuthi onjiniyela bakho bangakhipha ini nokuthi bakuphi. Gcina uhlu olucacile lokuvumela nokwenqaba, futhi ukhawulele ukufakwa kumarejista inhlangano yakho ewavumile.
Imodeli efanayo iyasebenza ekuxhumaneni. I-Shield ihlola ithrafikhi ephumayo kusukela ekugcineni ngokumelene nobuhlakani benethiwekhi obusesikhathini futhi inqamula ukuxhumana kuma-IP nama-domain aziwayo anobungozi athathwe ezinkombeni zosongo, ngakho-ke i-implant eyenze emshinini ayikwazi ukufinyelela ingqalasizinda eyakhelwe ukuyibiza. Ngaphezu kwalokho, ungakhawulela ithrafikhi ezindaweni ezinobungozi obukhulu ngokwendawo. Ukuxhumana ngakunye okuvinjiwe kuqoshwa nendawo lapho izama ukufinyelela khona.
Hlukanisa umshini osengozini bese unqamula yonke ithrafikhi ephumayo ngaphandle kwesiteshi se-ejenti, ukuze ugcine ukulawula i-endpoint ngenkathi uyigcina. Vula imodi ye-paranoid bese ukuhlukaniswa kucelwa ngokuzenzakalelayo lapho isexwayiso esibucayi sifika kunoma iyiphi i-endpoint.
Bona yonke indawo yokusebenza, iseva kanye ne-CI runner esebenzisa i-ejenti ye-Shield, nohlelo lwayo lokusebenza, inguqulo ye-ejenti, isimo samanje, ukuthi yaqala nini ukubonwa okokugcina, kanye nesihlalo sayo selayisensi. Hlunga ngegama lomethuleli, uhlobo lwe-endpoint noma isimo.
Ibhulokhi ngayinye iba umcimbi epulatifomu, ngobukhali, isitembu sesikhathi, indawo yokugcina okwenzeka kuyo, ukuthi ukuvezwa kuthathe isikhathi esingakanani, kanye nokuthi yini ngempela evinjiwe: iphakheji nenguqulo, noma indawo oya kuyo. Hlunga ngobukhali, isigaba, uhlobo, ububanzi bomsebenzisi noma usuku, bese uthumela ngaphandle.
Iphuzu ngalinye elivikelwe liphethe umkhondo walo wokuhlola kanye nohlu lwezingxenye, ukuze ukwazi ukwakha kabusha okwenzekile emshinini othile lapho othile ebuza.
I-ejenti eyodwa elula emboza izindawo zokusebenza, amaseva kanye nabagijimi be-CI, enezihlalo ezintantayo ukuze ukumbozwa kulandele abantu bakho kunehadiwe yakho.
Thola futhi ulungise izingozi ze-API kukhodi ngaphambi kokuba zifinyelele ekukhiqizweni.
Code and dependency scanning analyses the repository. Endpoint tooling watches processes and connections but has no application-security context to interpret a package or a registry. Between those two sits the moment a malicious dependency actually executes, on a developer’s machine. That is where Shield operates.
Reputation and signature-based approaches tell you about a malicious package once somebody else has already been hit by it. Shield blocks on behaviour and risk analysis, which is what makes it useful on the day an attack is new, and backs it with current network intelligence so anything that does land cannot phone home.
Blocks, isolations and geo events land in the same console as your code, dependency, pipeline and secret findings, with one audit trail. Not another agent with another dashboard futhi enye login.
Endpoint detection watches processes, files and connections at the operating system level. It does not know what a package registry is, whether a dependency is malicious, or whether a version was published yesterday. Shield brings application-security context to the developer endpoint and enforces policy on the things AppSec cares about.
Shield is a lightweight agent that checks installs as they happen. Developers only notice it when something is blocked, and the block comes with the reason.
Malicious and unauthorized package installs, packages that are newer than your minimum-age threshold, installs from registries you have not approved, packages on your deny list, outbound connections to known-malicious IPs and domains, and traffic to geographies you have restricted.
You decide. The minimum-age policy lets you either warn and allow, or block, when the publication date is unknown.
Yes. The global minimum-age threshold can be overridden per ecosystem, and disabled for a specific ecosystem if you need to.
It blocks all outbound traffic from that machine except the Shield agent’s own channel, so the endpoint is contained but still manageable. You can trigger it on demand, or enable paranoid mode so isolation is requested automatically when a critical alert lands.
On developer workstations, on servers, and on CI runners. Licensing uses floating seats.
Yes. Every block is an event with full detail, and each endpoint keeps its own audit trail. Events can be filtered and exported.
nge-Xygeni All-In-One AppSec Platform
