Skip to main content

Binary Networks Documentation

Internal engineering & product documentation.

Confidential. Access is restricted to authorized Binary Networks personnel.

Contents​

Everything is under the Binary Networks section in the sidebar: Governance & Policies, the Products (S.E.T and Scanners), and the golemsec demo org.

Governance & Policies​

Company-wide governance applying to every product — the Secure SDLC (SSDLC) umbrella, supply-chain / third-party security, and the named supporting policies (ISO/IEC 27001:2022 + SOC 2 Type II + NIST SSDF). Owned by the CTO & CSO.

Scanners Platform​

A multi-tenant security scanning platform. Pluggable modules normalize into one model (Assets → Checks → Findings → Tasks) served over one authenticated API. Organized high-level → down: Platform (architecture, API, operations), then Modules.

  • Platform Overview — what the platform is and its three modules
  • Platform Architecture — the production topology (SQS, scale-to-zero, the two-hop cloud chain, Jarvis), the engine & scanner-plugin contract, and the implementation reference
  • Platform API — the single three-key REST API: overview, full reference, and a step-by-step curl usage guide
  • Platform Operations — as-built AWS + Cloudflare deployment, monitoring & alerting, logging & SIEM, and the Jarvis investigator
  • Modules:
    • EASM — non-intrusive external attack-surface discovery (overview, getting started)
    • DAST — active web-app testing (overview, getting started)
    • Cloud (CSPM) — agentless AWS posture: overview, two-hop architecture, connecting AWS, running scans, findings & compliance

S.E.T — Security Posture & Compliance Platform​

The full product & engineering specification for S.E.T (Secure · Enforce · Train):

  • Overview — what S.E.T is and who it's for
  • Brand & UI/UX — design system, theming, navigation, motion, anti-AI-look discipline
  • Tech Stack — the 9 locked layers (frontend → CI/CD) with rationale
  • Architecture — BFF pattern, full AWS production design, disaster recovery
  • Multi-Tenancy — schema-per-tenant isolation
  • Observability & Logging — customer audit tier + internal Logz.io tier
  • Environments — nonprod + prod, AWS Organizations, access model
  • User Flows — Admin portal & Customer portal walkthroughs

Demo Org — golemsec​

A realistic, AWS-hosted ~200-user finance company simulation used as a live scan target:

  • Overview — what golemsec is and why it exists
  • Organization Architecture — departments, the 200 employees, the finance domain
  • AWS Architecture — VPC, subnets, security groups, the instance fleet, egress
  • Systems Inventory — every service: host, IP, port, state
  • Identity & SSO — AD → Keycloak federation, OIDC clients, per-app SSO
  • Data Model — the central golemsec_corp PII/business database
  • Credentials & Break-Glass — admin/service passwords and emergency access
  • Build Status — what's done, in progress, and next
  • Operational Walkthrough — operating the org as its own users; blockers found & fixed
  • Cost Control — on/off switch + nightly auto-off to park the lab
  • Disaster Recovery — DR plan, recovery runbook, and the host→AMI restore map

Use the sidebar to navigate.