Node.js

Install and attach K2's Node.js Language Agent with your application for Runtime Self Application Protection.

This section describes steps to install K2's Node.js Language Agent with your Node.js application on various environments.

Prerequisites

Language	Frameworks	DBs	Third Party Module support	Attack Coverage	Deployments
Node version 8 to 12 (LTS versions)	Express 4.x Koa 2.x Hapi 17.x, 18.x, 19.x	Mysql PostgreSQL Oracle MongoDB	BlueBird3.x Sequelize Mongoose MongoDb-core Generic-pool Multer	SQLI NOSQLI RCE PATH TRAVERSAL FILE INTEGRITY SSRF FILE UPLOAD STORED XSS REFLECTED XSS, LDAP XPATH UNTRUSTED DESERIALSATION RCI	Host Mode Container Mode EKS ECS

1. K2 doesn't guarantee support for old or deprecated versions of third-party modules.

2. If you run the agent on frameworks that aren't supported, K2 Node Agent may produce less-specific findings than it would for supported frameworks.

Node.Js Language Agent Installation

If you are using Node.js services on Node/VM/EC2 instance, checkout below page

Node/VM/EC2

If you are using Node.js services on Kubernetes, checkout below page

Kubernetes

If you are using Node.js services on AWS ECS/EKS/Fargate, checkout below page

AWS ECS/EKS/Fargate