Crypto Exchange Coinbase Open-Sources Its Security Scaling Tool

U.S.-based cryptocurrency exchange Coinbase is making a recently developed security scaling tool available to the public.

AccessTimeIconOct 18, 2018 at 5:00 p.m. UTC
Updated Sep 13, 2021 at 8:30 a.m. UTC

U.S.-based cryptocurrency exchange Coinbase is making a recently developed automated security scaling tool available to the public.

Called Salus, after the Roman the goddess of safety and well-being, the program can automatically choose to run and configure different security scanners and issue a report on the results, according to a Thursday blog post from Coinbase developer Julian Borrey.

Available as an open-source tool on GitHub from today, Salus is said to offer the advantage of being able to centrally coordinate security scans across a large number of software storage repositories, avoiding having to configure a scanner for each different project.

It also means that, when making system wide changes to security scanner setups, updates can be made centrally within Salus to roll out across all repositories, the post states.

Coinbase explains that it uses a combination of human code reviews and automated scans to ensure its production deployments are as "secure as possible." Salus was recently built by Coinbase to fill a gap in what was available for the team.

The post further states that open-source software is often coded to contain security scanners which can "tremendously improve security," adding:

"Tools like these help us to ship faster, and we are tremendously grateful for these open source efforts. It was in this spirit that Coinbase started its open source fund, a token of gratitude for this type of community-oriented work."

Coinbase now utilizes the tool to coordinate security scans across all its deployed services.

"It helps us enforce security policies for each change made to a codebase and ensures there is a quick feedback loop with the developer about potential vulnerabilities," Borrey wrote.

Keys image via Shutterstock

Disclosure

Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

CoinDesk is an award-winning media outlet that covers the cryptocurrency industry. Its journalists abide by a strict set of editorial policies. In November 2023, CoinDesk was acquired by the Bullish group, owner of Bullish, a regulated, digital assets exchange. The Bullish group is majority-owned by Block.one; both companies have interests in a variety of blockchain and digital asset businesses and significant holdings of digital assets, including bitcoin. CoinDesk operates as an independent subsidiary with an editorial committee to protect journalistic independence. CoinDesk employees, including journalists, may receive options in the Bullish group as part of their compensation.