Use case · Air-gapped and regulated networks
Security scans with no network at all.
Vulkro’s command-line tools run the whole analysis on the machine, refuse every outbound call, and take vulnerability data as a file you carry in.
Offline applies to the command-line tools and the VS Code extension. Vulkro Cloud is a hosted service. Run Vulkro Cloud on your own servers: talk to us.
01The problem
Most security tools assume the internet.
Regulated and classified networks hold the code that most needs review, and rule out any tool that uploads it.
- Uploads are not allowedA tool that sends code or findings anywhere cannot be approved for the network.
- Data goes staleVulnerability data refreshed over the internet quietly ages once the internet is gone.
- Licences that call homeA licence check that needs the network fails the moment there is none.
02How Vulkro helps
Carry the data in. Nothing goes out.
Download the update on a connected machine, carry it across and apply it. Every file is checked before anything is written, and the scan never reaches out.
Reading a live Salesforce org needs a route to it, so it is refused offline. Source and retrieved metadata scan fully offline.
03Why it holds up
Precise, and checkable.
- 01No outbound callsOne switch refuses every outbound call. The scan never needed one, so the results do not change.VULKRO_OFFLINE=1
- 02Checksummed dataEach file in the bundle is checked against its SHA-256 when applied. A failed check changes nothing.Eight manifest formats are parsed. The default published bundle currently ships npm and PyPI; the wider signed bundle covers the other six.
- 03Licensed offlinePro runs on a signed licence file installed on the machine, with no sign-in and no network.Vulnerability data is in every plan