公開ドキュメント

Customer docs for onboarding, trust, and day-2 operations.

Use these guides to launch quickly, complete security reviews, run reliable operations, and solve common issues independently.

Create workspace Read onboarding guide View after-login checklist Deploy scanner clients Open trust center overview Open questionnaire pack Set up AI assistant workflows Check support SLA Fix common ingest issues パートナープログラム

Need Fast Help?

Start here to resolve the most common onboarding and ingestion blockers.

Open troubleshooting

Security Review?

Use the trust center and questionnaire pack to answer legal and security due-diligence requests.

Open trust center package

Escalation

For urgent production incidents, include workspace details, job IDs, and timestamps in your support request.

Contact support

Developer Quick Starts

Copy the fastest deployment path for your environment.

Start with a working snippet, copy the command or file, then open the full guide only if you need deeper rollout detail.

Browse all deployment guides

GitHub Actions

GitHub Actions workflow

Drop one workflow into the repository and run Trivy, Semgrep, TruffleHog, and Syft in parallel.

.github/workflows/security-scan.yml

bash

bash <(curl -fsSL https://stg-blackshield.chaplau.com/source-bundles/github-security-scan.sh)

Download source ガイドを読む

GitLab CI

GitLab CI pipeline

Add one security stage that scans merge requests, default-branch builds, and scheduled pipelines.

.gitlab-ci.yml

bash

bash <(curl -fsSL https://stg-blackshield.chaplau.com/source-bundles/gitlab-ci.sh)

Download source ガイドを読む

GitHub Deploy Gate

GitHub Actions deploy gate

Drop in one workflow that evaluates the hosted Rego decision API before production deploys and prints the reasons inline.

.github/workflows/deploy-guardrails.yml

bash

bash <(curl -fsSL https://stg-blackshield.chaplau.com/source-bundles/github-policy-guardrails.sh)

Download source ガイドを読む

GitLab Deploy Gate

GitLab deploy gate job

Add one reusable deploy job that checks allow, warn, or deny outcomes against your tenant policy pack before release.

.gitlab/deploy-guardrails.yml

bash

bash <(curl -fsSL https://stg-blackshield.chaplau.com/source-bundles/gitlab-policy-guardrails.sh)

Download source ガイドを読む

AWS Lambda

AWS cloud scanner source

Bootstrap the AWS CDK project locally, then deploy the tenant-owned cloud posture scanner without rewriting the commands.

deploy/aws-cloud-scanner/

bash

bash <(curl -fsSL https://stg-blackshield.chaplau.com/source-bundles/aws-cloud-scanner.sh)
cd deploy/aws-cloud-scanner

Download source ガイドを読む

GCP Cloud Run

GCP cloud scanner source

Bootstrap the Terraform module locally, then deploy the cloud scanner to your target projects and regions with the same commands shown in the guide.

deploy/gcp-cloud-scanner/

bash

bash <(curl -fsSL https://stg-blackshield.chaplau.com/source-bundles/gcp-cloud-scanner.sh)
cd deploy/gcp-cloud-scanner

Download source ガイドを読む

Kubernetes

Helm chart source

Pull the Helm chart source locally, review the templates, and install the cluster scanner from your own repository.

deploy/helm/secplatform-k8s-scanner/

bash

bash <(curl -fsSL https://stg-blackshield.chaplau.com/source-bundles/k8s-scanner-helm.sh)
cd deploy/helm/secplatform-k8s-scanner

Download source ガイドを読む

SaaS on AWS

AWS SaaS scanner source

Bootstrap the AWS CDK project locally, then deploy the tenant-owned Lambda scanner without rewriting the commands.

deploy/aws-saas-scanner/

bash

bash <(curl -fsSL https://stg-blackshield.chaplau.com/source-bundles/aws-saas-scanner.sh)
cd deploy/aws-saas-scanner

Download source ガイドを読む

SaaS on GCP

GCP SaaS scanner source

Bootstrap the Terraform module locally, then deploy the Cloud Run Job scanner with the same commands shown in the guide.

deploy/gcp-saas-scanner/

bash

bash <(curl -fsSL https://stg-blackshield.chaplau.com/source-bundles/gcp-saas-scanner.sh)
cd deploy/gcp-saas-scanner

Download source ガイドを読む

ガイドコレクション

ここから開始

Fastest path from account creation to first validated findings.

初回検出のライフサイクル

Run scans, triage risk, and build a repeatable remediation workflow.

信頼とガバナンス

Copy-paste-ready deployment guides for every scanner type — CI/CD pipelines, cloud posture, Kubernetes, SaaS OAuth, and host intrusion detection.

信頼性とサポート

Buyer-facing proof of how BlackShield handles access control, evidence, data rights, control coverage, and offboarding in the actual product.

Reliability and Support

Understand availability commitments, incident flow, continuity planning, and troubleshooting.

15-20 分

ワークスペースをオンボード

ワークスペース、最初の管理者、および統合キーを作成して、チームが検出結果の取り込みを安全に開始できるようにします。

対象: ワークスペース所有者と最初のテナント管理者

ガイドを読む

30 ～ 45 分

ログイン後: 初日の次のステップ

これを初日から使用します。空のワークスペースから検証済みの結果と所有権のクリアに移行するためのチェックリスト。

対象: 新しいテナント管理者とセキュリティリード

ガイドを読む

10-15 分

最初の検出結果を取り込む

最初のスキャンを実行し、結果を送信し、さらに統合を拡張する前にデータ品質を確認します。

対象: セキュリティエンジニア、CIオーナー、統合エンジニア

ガイドを読む

継続的、毎日のレビュー推奨

検出結果を確認して優先順位付け

リスク、悪用可能性、所有権を使用して修復を優先し、チームが最初に重要な問題を修正できるようにします。

対象: セキュリティトリアージチーム、エンジニアリングリーダー、およびサービスオーナー

ガイドを読む

最初30 日間

最初の検出結果の後に行うこと

最初の調査結果を、明確なメトリクス、所有権、レポートを備えた再現可能なセキュリティプログラムに変換します。

対象: セキュリティプログラムオーナーおよびエンジニアリングマネージャー

ガイドを読む

2 minutes

Deploy the Pipeline Scanner

Embed Trivy, Semgrep, TruffleHog, and Syft into every commit with a single workflow file. Works with GitHub Actions, GitLab CI, and Bitbucket Pipelines.

対象: DevOps engineers, platform engineers, and security engineers

ガイドを読む

3 minutes

Gate Deploys with Hosted Rego Guardrails

Add a lightweight CI step that sends deploy context to your tenant and gets an allow, warn, or deny decision back without self-hosting OPA.

対象: Platform engineers, release managers, and security engineers

ガイドを読む

5 minutes

Deploy the Cloud Scanner on AWS

Scan your AWS environment for misconfigurations with Prowler, deployed as a Lambda container on EventBridge Scheduler — no EC2, no always-on compute.

対象: Cloud engineers, security engineers, platform teams

ガイドを読む

5 minutes

Deploy the Cloud Scanner on GCP

Scan GCP project posture with Prowler via a serverless Cloud Run Job triggered by Cloud Scheduler. One Terraform apply deploys to any number of projects and regions.

対象: Cloud engineers, security engineers, platform teams

ガイドを読む

2 minutes

Deploy the Kubernetes Scanner

Scan cluster posture with kube-bench (CIS benchmarks), kubescape, and Kyverno policy telemetry. One Helm chart install, one kubectl secret — done.

対象: Platform engineers, Kubernetes administrators, security engineers

ガイドを読む

5 minutes

Deploy the SaaS Scanner

Discover over-privileged OAuth grants, stale app access, and shadow AI tool sprawl across Google Workspace, Microsoft 365, and GitHub. Runs entirely inside your tenant boundary.

対象: Security engineers, identity and access management teams, platform engineers

ガイドを読む

3 minutes

Deploy the VM and Host Scanner

Ingest OSSEC and Wazuh host intrusion detection alerts into the platform for correlation with cloud and container findings. Works with Docker Compose, systemd, or ECS Fargate.

対象: Security operations teams, infrastructure engineers

ガイドを読む

10-15 分