Kadag Security

Main Features

Kadag Security achieves deep security testing coverage by running your containerized application in a carefully instrumented test environment. AI agents interact with your application like a security engineer, with access to source code, runtime instrumentation, and browser context.

How It Works

1. Install the Kadag GitHub app for code access integration
2. Repo is cloned and docker compose up executed in sandbox VM
3. AI Agents interact with your application like a security engineer
4. AI Agents have access to source code, runtime instrumentation and the browser context
5. Security vulnerabilities are reported along with steps to reproduce and remediation recommendations

Key Features

• Deep and Contextual: Combines code and runtime context in an instrumented environment for deep coverage
• No Noise: Testing scenarios mirror real workloads, all reported issues include easy-to-run reproduction scripts
• Tested Vulnerability Remediations: AI-provided fixes are tested in the same instrumented environment
• No Tweaking Required: Testing simulations driven by autonomous AI agents that adapt and evolve

Vulnerability Types

Tests for common application vulnerabilities such as SQL Injection, Server-side Request Forgery, Cross-site Scripting, Command Injection, as well as Business Logic issues and Authentication/Authorization issues.

Integration Support

Seamless GitHub integration for one-click scans or automatic scans on pull requests. GitLab, Bitbucket, and Azure DevOps integrations coming soon.

Target Users

Development teams, security engineers, and DevOps teams needing to integrate security testing into their CI/CD pipeline.

Requirements

As long as your application can be built in a Docker container, it can run in the instrumented environment without requiring application instrumentation.