Coinbase Exchange Open Sources Its Automated Security Scaling Tool, Salus
Coinbase Open Sources Its Security Scaling Tool
Coinbase, the largest crypto exchange in the United States by volume, has recently developed an automated security tool and made it available to the public via an open source code. This new tool is called Salus and it was named after the Roman goddess of safety and well-being, according to the company.
Salus can automatically run and configure different security scanners and issue reports on them. The code will be fully available on GitHub. One of the main advantages that Coinbase and Julian Borrey, one of the developers of the program, affirm that the program has is to coordinate security scans across a large number of software storages in a centralized way.
This way, the scans can be made more efficient as you avoid having to reconfigure them every time that you scan a new project. This saves time and automates the process that it make the process considerably easier. It was also affirmed that any change in the scanner can be done automatically via all the repository.
According to Coinbase, the software uses a combination of human code reviews and automated scans to ensure all the security needed for this kind of device. Also, the device is to have security scanners that will help it to improve security. The tool is already being used by Coinbase in order to coordinate security scans on the platform.
The developer Julian Borrey has affirmed that this can help Coinbase to enforce policies for each change made to the codebase of the system and always ensure a very fast feedback loop.
The Importance Of Open Source Software
It is great to see Coinbase releasing this new program as open source software. The spirit of the cryptocurrencies started with open source software and, even if it has shifted somewhat recently, it is still great to see that one of the major companies in the market is still honoring the tradition.
Also, by making the code open source, it is considerably more transparent and the company is able to participate in the development of a tool that has the potential of benefitting all instead of making the creation of these security devices to be too centralized.