Google open-sources Tsunami vulnerability scanner

mood · Jul 9, 2020

Google open-sources Tsunami vulnerability scanner
July 8, 2020
https://www.zdnet.com/article/google-open-sources-tsunami-vulnerability-scanner/

Google has open-sourced a vulnerability scanner for large-scale enterprise networks consisting of thousands or even millions of internet-connected systems.
Named Tsunami, the scanner has been used internally at Google and has been made available on GitHub last month.

There are already hundreds of other commercial or open-sourced vulnerability scanners on the market, but what's different about Tsunami is that Google built the scanner with mammoth-sized companies like itself in mind.
PROJECT WILL BE FOCUSED ON NO FALSE-POSITIVES
The search giant said that going forward Tsunami will focus on meeting the goals of high-end enterprise clients like itself, and the conditions found in these types of large and multi-device networks.
Click to expand...

Furthermore, Tsunami will also be extended with support only for high-severity vulnerabilities that are likely to be weaponized, rather than focus on scanning for everything under the sun, as most vulnerability scanners tend to do today.
Click to expand...

mood · Sep 29, 2021

Google Announces Rewards for Tsunami Security Scanner Plugins
September 29, 2021
https://www.securityweek.com/google-announces-rewards-tsunami-security-scanner-plugins

Two types of contributions are currently accepted in the experimental reward program, namely vulnerability detection plugins and web application fingerprints.

An open-source general purpose network security scanner, Tsunami is meant to help organizations identify vulnerabilities and misconfigurations in their networks in an automated manner.
New plugins are expected to help Tsunami detect new security issues in scanned networks, and all interested contributors are encouraged to submit their projects.
Click to expand...

Submissions will be reviewed by panel members in Google's Vulnerability Management team and payout amounts will be awarded based on quality, vulnerability severity and time sensitivity. The maximum reward is $3,133.7, for critical vulnerabilities that came to light within the past two weeks.

Google added new web application fingerprinting capabilities to Tsunami only months ago, and is now looking to expand the scanner’s ability to detect off-the-shelf web applications.
Additional information on the Patch Reward Program for the Tsunami project is available on Google’s Bug Hunters website.
Click to expand...

Log in or Sign up

Google open-sources Tsunami vulnerability scanner

mood Updates Team

mood Updates Team

Log in or Sign up

Google open-sources Tsunami vulnerability scanner

mood Updates Team

mood Updates Team

Useful Searches