SOOS DAST Droplet

SOOS DAST Scanning on a Digital Ocean Droplet

• Scan web apps and APIs defined by OpenAPI, SOAP, or GraphQL with a single command.
• Runs on a Digital Ocean droplet, pre-configured to run the SOOS DAST scanner.
• Manage issues via single-pane web dashboard shared with SOOS SCA
• Track tickets in Jira or GitHub Issues

Sign up for your free trial at https://app.soos.io/register

Software Included

Creating an App using the Control Panel

Click the Deploy to DigitalOcean button to create a Droplet based on this 1-Click App. If you aren’t logged in, this link will prompt you to log in with your DigitalOcean account.

Creating an App using the API

In addition to creating a Droplet from the SOOS DAST Droplet 1-Click App using the control panel, you can also use the DigitalOcean API. As an example, to create a 4GB SOOS DAST Droplet Droplet in the SFO2 region, you can use the following curl command. You need to either save your API access token) to an environment variable or substitute it in the command below.

curl -X POST -H 'Content-Type: application/json' \
         -H 'Authorization: Bearer '$TOKEN'' -d \
        '{"name":"choose_a_name","region":"sfo2","size":"s-2vcpu-4gb","image": "soos-soosdastdroplet"}' \
        "https://api.digitalocean.com/v2/droplets"

Getting Started After Deploying SOOS DAST Droplet

Welcome to SOOS.io’s DigitalOcean 1-Click DAST Droplet.

This droplet installed the latest SOOS DAST docker image.

SSH into your Droplet

ssh root@your_droplet_public_ipv4

Then configure a scan by running the following commands:

cd /usr/soos

./configure-soos-dast.sh

You will need the Client ID and API Key from your SOOS account to configure a scan. You can find these keys in the SOOS app in the “Integrate” menu ( https://app.soos.io/integrate/dast ).

For more help and information, visit https://kb.soos.io

Thank you!

SOOS