Crypto Exchange Coinbase Open-Sources Its Security Scaling Tool

U.S.-based cryptocurrency exchange Coinbase is making a recently developed security scaling tool available to the public.

Oct 18, 2018 at 5:00 p.m. UTC
Updated Sep 13, 2021 at 8:30 a.m. UTC

U.S.-based cryptocurrency exchange Coinbase is making a recently developed automated security scaling tool available to the public.

Called Salus, after the Roman the goddess of safety and well-being, the program can automatically choose to run and configure different security scanners and issue a report on the results, according to a Thursday blog post from Coinbase developer Julian Borrey.

Available as an open-source tool on GitHub from today, Salus is said to offer the advantage of being able to centrally coordinate security scans across a large number of software storage repositories, avoiding having to configure a scanner for each different project.

It also means that, when making system wide changes to security scanner setups, updates can be made centrally within Salus to roll out across all repositories, the post states.

Coinbase explains that it uses a combination of human code reviews and automated scans to ensure its production deployments are as "secure as possible." Salus was recently built by Coinbase to fill a gap in what was available for the team.

The post further states that open-source software is often coded to contain security scanners which can "tremendously improve security," adding:

"Tools like these help us to ship faster, and we are tremendously grateful for these open source efforts. It was in this spirit that Coinbase started its open source fund, a token of gratitude for this type of community-oriented work."

Coinbase now utilizes the tool to coordinate security scans across all its deployed services.

"It helps us enforce security policies for each change made to a codebase and ensures there is a quick feedback loop with the developer about potential vulnerabilities," Borrey wrote.

Keys image via Shutterstock

The Festival for the Decentralized World
Thursday - Sunday, June 9-12, 2022
Austin, Texas
Save a Seat Now

DISCLOSURE

Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

The leader in news and information on cryptocurrency, digital assets and the future of money, CoinDesk is a media outlet that strives for the highest journalistic standards and abides by a strict set of editorial policies. CoinDesk is an independent operating subsidiary of Digital Currency Group, which invests in cryptocurrencies and blockchain startups. As part of their compensation, certain CoinDesk employees, including editorial employees, may receive exposure to DCG equity in the form of stock appreciation rights, which vest over a multi-year period. CoinDesk journalists are not allowed to purchase stock outright in DCG.

Trending

1
CoinDesk - Unknown
A16z Doubles Down on Crypto Investments Despite Market Downturn, and NFL Launches Play-to-Earn NFT Game

The most valuable crypto stories for Wednesday, May 25, 2022.

The most valuable crypto stories for Wednesday, May 25, 2022.

CoinDesk - Unknown
2
CoinDesk - Unknown
OCC: ‘No Contagion’ Post-Terra Collapse

A surprisingly measured set of comments from Acting Comptroller Michael Hsu.

A surprisingly measured set of comments from Acting Comptroller Michael Hsu.

CoinDesk - Unknown
3
CoinDesk - Unknown
Nvidia’s Crypto Mining Chip Revenue Now 'Nominal' Following Months of Decline

A drop in crypto mining chip sales dragged down the chipmaker’s OEM business unit year-over-year.

A drop in crypto mining chip sales dragged down the chipmaker’s OEM business unit year-over-year.

CoinDesk - Unknown
4
CoinDesk - Unknown
How to Make It in the Metaverse

In this work of fiction, a woman buys a home in the metaverse because New York City rent is just too high. But virtual worlds exact their own cost of living. This piece is part of CoinDesk's Metaverse Week.

In this work of fiction, a woman buys a home in the metaverse because New York City rent is just too high. But virtual worlds exact their own cost of living. This piece is part of CoinDesk's Metaverse Week.

CoinDesk - Unknown