Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [security]

For requests for recommendations of security software. Before using this tag, make sure there's no more specific tag for the software you're after.

-1
votes
0answers
4 views

How to secure send a API call from react (front-end) to back-end

I´m having some trouble to call my back-end api with react because I want to verify that react application. My thought was sending a token within the call body, however the data in the react app can ...
0
votes
0answers
3 views

Need a security tool for docker base images

I need to find a tool that could cover the needs of my team. More sooner than later we will be allowing developer to push their own docker base images to registry and need to find a tool that inspect ...
1
vote
0answers
16 views

Post quantum TLS based web-browser client

Are there any open source projects that implement a web browser client that has support for post quantum TLS protocols so that it can talk with post quantum patched TLS web servers. I've checked ...
0
votes
0answers
6 views

how to secure REST APIs from a backend app that are called from a frontend app?

I have 2 web apps running in the cloud. the frontend one serves an angular app and the backend one exposes REST services. Frontend is secured via SSO, but backend needs be secured as well. Backend ...
-1
votes
0answers
4 views

(API Security) Best practice software to secure Google Cloud Function API

I am running a Python Flask Google Cloud Function to access a privileged service. I want to be able to call the GCF from an Automation For Jira webhook sender. How can I authenticate that the call was ...
0
votes
0answers
9 views

What software can I use to encrypt all files that are copied out of a system?

What software can I use to encrypt all files that are copied out of the system(USB, network, email,...) such that only systems with the same encryption will be able to read the files. OS is Windows.
-2
votes
1answer
16 views

How to limit login access and create ban after 4 attempts to web application based on user's IP address? [closed]

i have created the js file for this purpose but i cannot find a way to limit the access after 3 failed attempts based on user's ip address. can someone please suggest me a way to do that? i do not ...
0
votes
0answers
13 views

recommendation for IAM for .NET Core with row level security

I am looking for a good IAM library or framework for .NET Core that would give row level filtering of a SQL data set. Are there any out of the box solutions that would support something similar to ...
0
votes
0answers
7 views

Identity and Access Management solution

1) We are using Oracle IDM (Identity Management) solution for authentication (includes MFA), authorization, single-sign-on and self-service password reset (forgot password) needs. 2) Some of the ...
0
votes
0answers
6 views

Software to trace back a decrypted video

My friend has sent his students some videos weeks ago for educational purposes of his course. As he does not want that other people resell them, he decided to encrypt the video with ev4-encryption. ...
0
votes
0answers
3 views

What are the alternatives for storing keys, secrets and certificates securely in the cloud

I'm looking for an alternative to a service like Azure Key Vault to store secrets, keys and certificates. While Azure key vault does a commendable job, I want a solution that is cloud agnostic and ...
-2
votes
0answers
8 views

Can we use Spring Security to manage Authentication and Authorization for Angular Frontend resources

I have set up a Full Stack Project where we have to submodules, one is Spring Boot Micro services part that have the rest endpoints for the second module i.e. Angular App. We are building resources ...
0
votes
0answers
3 views

Software to get better experiences with “modern” web page

I take steps to minimize the amount of data that can be collected about me, for a variety of reasons. For example, to reduce instances of "identity theft", hacking, etc. I normally use an older ...
1
vote
0answers
5 views

What software to use for DevSecOps pipeline?

I have a CD pipeline built in Jenkins that builds a Java project, packages the microservices as docker containers and uses terraform for provisioning on AWS. What are the plugins I should add to: Do ...
0
votes
0answers
4 views

App to fingerprint (possibly password) protect an Android app

If I don’t have a password on my Android device (I know, I know), is there an app which can protect individual applications, such as my email? I strongly prefer fingerprint protection, but will ...
1
vote
0answers
15 views

Looking for a “remote wipe” software package for Windows 10

I'm looking for a solution that would allow me to locate a stolen or lost Windows 10 PC, and initiate a remote data wipe. We can't use the built in Windows 10 location feature as we don't log in with ...
1
vote
0answers
13 views

What is better alternative technologies of Elastic Stack for endpoint detection and response (EDR) products collecting/analyzing endpoint log data?

I am trying to develop endpoint detection and response (EDR) as a security solution. I am currently researching how to actually develop it. I googled quite a few websites, but they only described just ...
0
votes
0answers
9 views

Detecting vulnerabilities in JNI systems

I'm looking for a tool that is able to detect vulnerabilities in JNI (Java native interface) systems (systems are written with C(++) and Java?) IS there any tool that can analyze and extract the ...
0
votes
0answers
9 views

I found out my new android secretly unlocking my microphone.. i need a app to check what app is responsible for this

sorry for the long title.. I'm looking for a app to check what app is set my microphone (secretly) on. Does anybody know a tool/app to find this out.. i can only find apps/tools for blocking mic/cam. ...
0
votes
0answers
6 views

What are some free/open source plugins in Android Studio to identify vulnerable code written in application code?

I am testing an Android App, I have the code access and want to perform vulnerability analysis in the code. Please suggest me some open source/free plugin of Android Studio/IntelliJ. I tried RIPS but ...
0
votes
0answers
25 views

Security solution for prosumer

I need to protect two machines, both are running W10; one is my work PC and the other a gaming PC. Actually Im running GData Is on both, but it seems it is draining more resources at every update, and ...
0
votes
0answers
7 views

Azure AD v. ADFS

We had (Before it went belly up) an ADFS server that was simply doing a translation from SAML 2.0 to WSFED (My end point software can not take in SAML only WSFED). My question is, what are the ...
0
votes
0answers
4 views

access control solution for cpanel environment to control access to (external) password protected sites

I need a solution. The solution is probably more about configuration of existing software rather than new code but whatever can work in my environment. The challenge: I have a number of internet ...
0
votes
0answers
10 views

Keycloak SPI - OAuth2 and 2 FA using my own 2FA Service

I want to use keycloak OAuth2 and 2factor auth for my project. But I have to use my own service(not FreeOTP or Google Authenticator) for 2FA. I have made many research, but I couldn't find good ...
0
votes
0answers
3 views

How best to deal with repeated arbitrary requests (DDOS) to my website

security noob here. So my website is starting to experience some ddos attacks (a lot of requests being made to arbitrary endpoints from a few source IPs). What are some common approaches to dealing ...
0
votes
0answers
11 views

Most secure cloud storage service

I'm looking for a secure cloud storage. Currently using Dropbox, but considering to switch given that it doesn't fully encrypt files, and thus files aren't really only mine lol. I've heard about ...
0
votes
0answers
6 views

Looking for Home Network Monitor/IDS

I've spent some time looking for a home network IDS, and I've tried a couple of tools but to no luck. Do you have any recommendations? I'll be running the software on an old laptop, that's got 16GB ...
1
vote
0answers
5 views

drupal 7 restrict login by ip - Monitor

We are using a drupal 7, with the module "restrict login by IP". We restrict by: mail & Ip address. Our goal is to get "debug log", for Add new row to this table(for monitoring any changes in ...
0
votes
1answer
16 views

self hosted website, trival ssl certificate installs

I host my own website from a home server (domain hosted through go daddy) and I have been trying to find information on how to install a ssl certificate. How ever I cant find any information on how to ...
0
votes
0answers
18 views

Recommendation for using Spring Security SAML library version

I'm trying to use the Spring Security SAML DSL wrapper for configuring the SAML Service Provider using the actual Spring Security SAML library to leverage the easy to use Java based configuration ...
0
votes
0answers
21 views

Hosting simple html with authentication-only access

I have this weird idea in my mind - like is it possible to host simple html page on my desktop the access to which is only accepted via an authentication key? I have a static IP and nowadays domain ...
0
votes
1answer
9 views

Looking for cloud- or Unix-based open-source tools that support long-term enterprise-wide key/passphrase management and provide a programmatic API

My question really is: how does an enterprise (a small ~150-employee company) manage the passphrases and encryption keys used at the time of encrypting a large volume of data, when such encrypted data ...
1
vote
0answers
16 views

Platform For Selling Videos Online?

I'd like to set up an online store where I can sell some video courses ( 3 or 4 with a 10 minutes maximum length each) , I would like to know if I could have the option of doing live video streaming, ...
0
votes
0answers
3 views

Distributed attacks detection - software or services

I need more distributed attacks detection software or services such as https://www.abuseipdb.com/ or https://www.blocklist.de. Right now I'm using those to add IPs that are near-guaranteed to be ...
2
votes
0answers
38 views

On-premise Mobile Device Management solution for Android

I'm looking for a Mobile Device Management solution that can be deployed on my own servers. Cloud-based solutions are strictly NOT required. Please enlist such solutions which can cater at-least ...
0
votes
0answers
10 views

Software for managing domain object ACLs

We are developing a MEAN stack application that includes discretionary access control for business/domain objects, much like a file or content management system does. Users must be able to give other ...
0
votes
2answers
34 views

Simple encryption app

I need to send passwords to other people. Is there an app (cross-OS if possible) that allows me to send them in a secure way ? Maybe a simple private/public keys system. Thanks !
0
votes
1answer
9 views

All-In-One vulnerability scanner for PHP project?

I've asked this on incorrect sub-site (security.se), however, i think that question fits this site more. So, I was searching for a tool, which includes multiple Vulnerability-Scanners, so we could ...
0
votes
0answers
14 views

Open source solution for self destruction messages on my own server (like Privenote)

I need a software solution for self destruction messages like for example privnote. But i need to run it on my own server due to security reasons. Does anyone have an idea? Thanks allot :)
1
vote
1answer
33 views

Secure delete files

I have a folder which I need to secure delete. I tried File Shredder and BleachBit but I got error because the files were in use or priviledge problems. Is there a program to delete files and restart ...
1
vote
0answers
9 views

Mac firewall or tool that blocks access to websites based on geographic location?

I'm looking for a free Mac OS firewall that allows blocking of sites based on the server's estimated geographic location or iptable-like banning at a minimum. The main application is to thwart ...
0
votes
0answers
13 views

iOS: secure storage for sensitive information

Sometimes I need to view some of my documents and it's always a huge pain to search for a physical copy, especially if you are not at home and just need to get some number. I am looking for a secure, ...
0
votes
0answers
19 views

Golang implementation of PCKS#11

With a PCKS#11 standard implementation, you can use a PIN smartcard for a MFA (multi-factor authentication) sign on. Commonly, there is a PKCS#11 interface in a webbrowser software to access secure ...
0
votes
2answers
72 views

Deterministic Password Generator

I am looking for deterministic password generators which are available for Linux. My goal is to have one password to remember and use that to make passwords for all my logins.
2
votes
1answer
31 views

Manage permissions and passwords for linux, windows and mac

I am searching some software to make something similar to a domain controller on windows that can be compatible with mac, linux and windows. I need to apply security roles and manage their password ...
0
votes
0answers
9 views

3rd party Android fingerprint unlock program?

I am looking for an Android program to allow fingerprint unlocking of my Lenovo P2 phone running Android 8.1. (The built-in support and settings appear not to work in the current mode I am testing ...
0
votes
0answers
24 views

Secure paidment method Primefaces

I´m interested in adding a payment method to my Primefacess app. Is there any paypal or any secure library for credit card payment that I can add? I´m specially interested in the credit card payment.
0
votes
0answers
15 views

Hosted VPN service for cloud-based business

Our business has about 400 associates who have to travel, and consequently use public Wi-Fi hotspots almost daily. It sounds like "best practice" dictates we should have them connect to a VPN to ...
0
votes
0answers
19 views

Certificate Management

Broadly, we are a Microsoft shop and our company manages about 1,500 certificates, mostly for our websites. We are no longer doing self-signed certificates and another contracted company "manages" the ...
1
vote
0answers
16 views

Is there a backup tool for linux that allows selective deletion as well as performing backups with just a public key on the client?

In the era of GDPR, making backups comply with all regulations can be a busy task. I am looking for a backup tool for linux that allows me to: Selectively delete files in the backup. Do a backup from ...