We are a small early stage startup with not so much money to spend.
We have less than 3 servers that we want to monitor for security issues.
Our website is essentially on one server having:
- Ubuntu
- A Single-Page-App (full javascript)
- An API (Play/Scala/Netty) with MongoDB and ElasticSearch behind and an Apache reverse proxy
As you can understand, I'm more interested by server monitoring rather than application monitoring (not really looking for SQL injections, XSS or other things like that, I guess no tool is able to test that automatically on a JS app + API stack)
Is there any offering available, or open source product to monitor such things and alert us on security issues?
We are looking for a free or cheap tool, easy to use. Preferable a cheap SaaS offering, or a tool that can be run on a developer's computer (and not something that targets a 10000 computer network and should be run as image on vShpere or KVM, like some offers i've seen)
I have seen products like Nessus, Qualys, BeyondSecurity with SaaS offerings but it's extremely difficult to understand if these offers are affordable as it seems we always have to contact a sale to obtain any price, or the minimum number of ips to scan is > 250, or the price is > 3000$
Our cloud provider has made our server vulnerable temporarily (a shame: the firewall stopped working, opening very sensitive and easy to exploit ports to the outside world). At least we would like to be alerted for such things, and possibly a little more than a simple port scan.
Have you come up with any solution for this kind of task? Are there open-source tools reliable, easy to use for a regular developer and up to date?