"SIWECOS - CMS security sponsored by the German government"
summary
Government-funded SIWECOS runs an open API that aggregates five scanners (HTTP headers/CSP checks, info leakage, TLS grade, malware/phishing, DOM XSS) and scores sites 0–100 security score so owners see concrete fixes. It ships open-source plugins for Joomla and WordPress and a system to push web-host firewall rules for critical patches, with ~150 hosts enrolled and one host reporting 2.4 million rule hits in 24 hours. The project is live, extensible, and designed to force fixes within a 6–8 hour window.
AI-written summary · about
chapters (10)
- 0:00Introduction to CMS garden
- 2:58Origins of CMS garden
- 10:32The security challenge
- 15:47The Savikas project
- 18:39Awareness building
- 20:38Scanning and security tools
- 25:48Open source strategy
- 28:27Bridging the patch gap
- 34:03The web host service
- 38:11Call to cooperation
related talks
27mSecuring the Software Supply Chain: Integrating OpenSSF Scorecard, Jenkins, and the O...
27mSecuring Applications and Managing WAFs at a large scale
42mAssessing the Risk of Open-source Components Using OpenSSF's Scorecard
14mIt's a Jungle Out There: The Security State of CMS Platforms
34mContinuous Security Monitoring with ImmuniWeb
50mHow Do You Trust Open Source Software?
17mWPSE: Fortifying Web Protocols via Browser-Side Security Monitoring
54mSecure Software Development