Vulnerability Scanning Automation

Automated scan scheduling, asset ownership and remediation reporting for Indonesia's national cyber agency.

28 PRs
Pull requests merged over about three and a half months, from initial migration to scheduled exports

Role: Backend Engineer (part-time)
Period: May 2023 to Jul 2023
Client: BSSN
Project type: Featured
Room in the 3D HQ: L3:vulnerability-scanning-automation

Results

28 PRs
Pull requests merged over about three and a half months, from initial migration to scheduled exports
Counted in the repository's pull request history.

Problem

BSSN scans protected sites and systems for vulnerabilities. Starting scans, tracking asset owners and preparing reports required extensive manual work in the scanner console.

Contribution

I designed the data model and REST API with Express, Sequelize and Swagger for protected sites, assets, platforms, owners, scans and vulnerabilities, including audit logs.
I integrated the Nessus API to start, pause and resume scans, with email notifications and scheduled jobs for progress and expected completion tracking.
I added severity counts, remediation-stage statistics and dashboard summaries with Redis caching.
I generated per-asset PDF vulnerability reports across scans and scheduled exports comparing results between scan dates.