Skip to main content

Offline Security Client

Project description

Offline Security Client

You definitely haven't seen such approach before! Suitable for those who would like to protect his SAP systems and don’t want to pay a lot. Or maybe you are only interested in Compliance topic. So, Offline Security is cloud based application which is intended to assess security aspects of SAP systems. All needed information for our security reports/analytics you gather yourself (or you can easily automate it using any RPA solution). Then you send us all gathered information (using cli tool). Important: All sensitive information (SAPSIDs, IP addresses, server names, and so on) is masked. And we don’t request any identity data of our clients. It means that NOBODY – our administrators, developers or external hacker can’t link this information with particular client, particular system or particular company. Finally, we produce analysis on server side and issue for you report which can download only you (client application that sent all data).

Advantages

  • Quick start: Only you need to install client tool using one cli command
  • Full Transparency. All configurations files are open. The source code of client application is available to read as well
  • You don't need to invest money to SAP Solution Manager consultants or buy expensive products like Onapsis or SecurityBridge
  • Don't need to create user account in target SAP systems. Don't need to install any ABAP code
  • Possibility of customisation. Based on predefined check list you can create your own checks (probably even not related to Information Security)
  • Our database is regularly updated. Always base checks are available out-of-box. Even you can see what configurations are used by other clients
  • Cool reports, easy to use with predefined filter options

Table of contents

Installation

Python installation

Install last version of Python 3.x from here
We support only Python 3.x!

Published version installation (recommended)

pip3 install offlinesec_client

or

python3 -m pip install offlinesec_client

Installation last version from repository on github.com

git clone https://github.com/offlinesec/offlinesec-client.git
python3 -m pip install --upgrade pip
pip3 install setuptools wheel
python3 setup.py bdist_wheel
python3 -m pip install dist\offlinesec_client-1.0.8-py3-none-any.whl

The Version could be different! Please verify generated wheel name.

Upgrade to last published version

pip3 install --upgrade offlinesec_client

Check what version is installed

pip3 show offlinesec_client

Quick Start

How to discovery missed SAP Security Notes:

  1. Prepare text file with installed SAP software component versions (details)
  2. Send prepared file to server (optional you can set SAP system name):
offlinesec_sap_notes -f "software_components.txt" -s "Demo System"
  1. Wait aprox 5 minutes (Depends on server load)
  2. Download your report:
offlinesec_get_reports
  1. Find your downloaded report in Downloads folder. Enjoy.

Use Cases

  1. SAP Security Notes Analysis (Vulnerabilities Check)
  1. Profile Parameters/Compliance Analysis (SAP Security Baseline Checks) (Available since version 1.0.12)
  • How to generate report
  • Report Example
  • All sensitive information is excluded from the upload file (SAPSIDs, server names, ...)
  • Please remember you can create your own check variants. The details are available here
  1. Roles/Critical Privileges Analysis (Available since version 1.0.15)
  1. Transport Request Analysis
  • Will be available in next releases
  1. SAP Security Audit Log Analysis
  • Will be available in next releases

If you need more - email me info@offlinesec.com.

Important Notes:

  1. We don't collect any client identity like email address, SAP SIDs, company, ip addresses. All Checks are performed fully anonymously.
  2. The reports aren't stored on server side. Once you have downloaded the report it's deleted.
  3. All data transferred to server are encrypted with HTTPS protocol.
  4. The report could download only the person who has token (Random String generated on first start).
  5. You can download reports within 10 days after it was requested.
  6. Review the source code. You can be 100% confident what happening on client side with your data and how it is processed.

Additional documentation is available here

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

offlinesec_client-1.0.18.tar.gz (13.6 kB view details)

Uploaded Source

Built Distribution

offlinesec_client-1.0.18-py3-none-any.whl (16.9 kB view details)

Uploaded Python 3

File details

Details for the file offlinesec_client-1.0.18.tar.gz.

File metadata

  • Download URL: offlinesec_client-1.0.18.tar.gz
  • Upload date:
  • Size: 13.6 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/4.0.2 CPython/3.10.7

File hashes

Hashes for offlinesec_client-1.0.18.tar.gz
Algorithm Hash digest
SHA256 d9a65f9dad62d7f0d052996d02961bf70ed7ebd76ea90105f68749c414079c54
MD5 14ddc379206ce5634e4978004f2a91fd
BLAKE2b-256 3a4f40acc58eb4a75071ccc239c89f741848a54527353ac056156debaf3193d9

See more details on using hashes here.

File details

Details for the file offlinesec_client-1.0.18-py3-none-any.whl.

File metadata

File hashes

Hashes for offlinesec_client-1.0.18-py3-none-any.whl
Algorithm Hash digest
SHA256 1a19368aceed5897c89411e308e202ce6a9cb14bbe633478b4594fced5b9c904
MD5 9dae9d43146eeae1989d49d94a41f1b2
BLAKE2b-256 d30ba8db468a0f0c795630b92d6da5fcf4c37cb9f8a598b1362ae926ca61e856

See more details on using hashes here.

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page