# CVE Scanning

## CVE Scanning with K2 Platform

In this section, we outline the steps for CVE Scanning using the K2 Platform.

### Step 1 : K2 Portal and Account Creation

In order to use K2 Platform You need to create an account on K2 Portal.

K2 Portal can be used as SaaS model or you can deploy entire portal on your On-Premises.

{% tabs %}
{% tab title="K2 SaaS(Recommended)" %}
K2 Platform is offered as SaaS software and can be used directly visiting SaaS portal i.e. <https://k2io.net> or if you are an AWS customer then you can buy subscription to K2 SaaS portal on AWS Marketplace.

For more details checkout our page

{% content-ref url="../../k2-portal/k2-saas" %}
[k2-saas](https://k2cyber.gitbook.io/k2io-documentation/k2-portal/k2-saas)
{% endcontent-ref %}
{% endtab %}

{% tab title="K2 On-Premises" %}
K2 Platform is also offered as On-Premises based solution and can be deployed directory on your local infrastructure or if you are an AWS customer then you can subscribe to K2Cloud AMI and deploy K2 On-Premises portal on AWS.

For more details&#x20;

{% content-ref url="../../k2-portal/on-premises" %}
[on-premises](https://k2cyber.gitbook.io/k2io-documentation/k2-portal/on-premises)
{% endcontent-ref %}
{% endtab %}
{% endtabs %}

{% hint style="info" %}
At this point you have successfully created an account with K2 Portal.
{% endhint %}

### Step 2 : K2 Agents Installation

Install K2 Agent in your environment to perform CVE Scan in your applications.&#x20;

Choose the environment from tabs below and follow the instructions for agent installation.

{% hint style="info" %}
We recommend to choose **IAST** as your environment and download K2 Installer/Yaml files if you have enabled CVE scanning on K2 Portal.
{% endhint %}

{% tabs %}
{% tab title="Node/VM/EC2" %}
Checkout our K2 Agents Installation Page for Node/VM/EC2

{% content-ref url="../../k2-agents/vm-node" %}
[vm-node](https://k2cyber.gitbook.io/k2io-documentation/k2-agents/vm-node)
{% endcontent-ref %}
{% endtab %}

{% tab title="Kubernetes" %}
Checkout our K2 Agents Installation Page for Kubernetes

{% content-ref url="../../k2-agents/kuberenetes" %}
[kuberenetes](https://k2cyber.gitbook.io/k2io-documentation/k2-agents/kuberenetes)
{% endcontent-ref %}

{% endtab %}

{% tab title="AWS ECS" %}
Checkout our K2 Agents Installation Page for AWS ECS

{% content-ref url="../../k2-agents/aws-ecs" %}
[aws-ecs](https://k2cyber.gitbook.io/k2io-documentation/k2-agents/aws-ecs)
{% endcontent-ref %}
{% endtab %}

{% tab title="AWS Fargate" %}
Checkout our K2 Agents Installation Page for AWS Fargate

{% content-ref url="../../k2-agents/aws-ecs" %}
[aws-ecs](https://k2cyber.gitbook.io/k2io-documentation/k2-agents/aws-ecs)
{% endcontent-ref %}
{% endtab %}
{% endtabs %}

### Step 3 : Protect Web Application

‌To protect your web applications and APIs, your application must be started with K2's Language Agent.

Please choose your platform and go through K2's language agent installation from below tabs and follow instructions

{% tabs %}
{% tab title="Java" %}
Checkout our Java Language Agent Installation Page

{% content-ref url="../../k2-lanaguage-agents/java" %}
[java](https://k2cyber.gitbook.io/k2io-documentation/k2-lanaguage-agents/java)
{% endcontent-ref %}
{% endtab %}

{% tab title="NodeJs" %}
Checkout our NodeJs Language Agent Installation Page

{% content-ref url="../../k2-lanaguage-agents/node" %}
[node](https://k2cyber.gitbook.io/k2io-documentation/k2-lanaguage-agents/node)
{% endcontent-ref %}
{% endtab %}

{% tab title="Ruby" %}
Checkout our Ruby Language Agent Installation Page

{% content-ref url="../../k2-lanaguage-agents/ruby" %}
[ruby](https://k2cyber.gitbook.io/k2io-documentation/k2-lanaguage-agents/ruby)
{% endcontent-ref %}
{% endtab %}
{% endtabs %}

### Step 4 : Enable CVE Scanning

{% hint style="success" %}
In order to enable **CVE** scanning, Make sure You have installed Agents in IAST mode. You can also confirm from protected applications that you are using IAST group.
{% endhint %}

#### Step 1 : Login to [K2 portal](https://k2io.net)

#### Step 2 : Open Policy Tab&#x20;

To enable Enable CVE scanning which will help us eventually detect CVEs automatically, Go to [Policy ](https://www.k2io.net/centralmanager/#!/app/policy/webApp)Tab and subsequently Web Applications sub page.

![](https://1100881526-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-M__LRjxgPnpb0czuBBB%2F-Mb12MRJQ0F1M6INGu9Y%2F-Mb1KdkvM0-cFfy8kDDa%2FPolicyWebApplications.PNG?alt=media\&token=b2893a3f-35f4-4ad5-b2a5-47f751223557)

#### Step 3 : Edit Policy&#x20;

Click on Edit/Show policy at the right side on your IAST policy.

#### Step 4 : Go to [Agent Policy](https://www.k2io.net/centralmanager/#!/app/policy/webApp/icpolicyeditor)

![](https://1100881526-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-M__LRjxgPnpb0czuBBB%2F-Mb12MRJQ0F1M6INGu9Y%2F-Mb1KlYnVuWgcGDApsuH%2FCVEScanning.PNG?alt=media\&token=b425fdd3-64f5-49b7-9661-77c8e304a9c9)

Enable CVE Scanning and set sub properties of CVE scanning as per your requirements.

### Step 5 : Check Results

Reported CVEs can be found in application page under Vulnerabilities view.

[CVE Vulnerabilities](https://www.k2io.net/centralmanager/#!/app/vulnerability/application)
