公开文档

Customer docs for onboarding, trust, and day-2 operations.

Use these guides to launch quickly, complete security reviews, run reliable operations, and solve common issues independently.

Create workspace Read onboarding guide View after-login checklist Deploy scanner clients Open trust center overview Open questionnaire pack Set up AI assistant workflows Check support SLA Fix common ingest issues 合作伙伴计划

Need Fast Help?

Start here to resolve the most common onboarding and ingestion blockers.

Open troubleshooting

Security Review?

Use the trust center and questionnaire pack to answer legal and security due-diligence requests.

Open trust center package

Escalation

For urgent production incidents, include workspace details, job IDs, and timestamps in your support request.

Contact support

Developer Quick Starts

Copy the fastest deployment path for your environment.

Start with a working snippet, copy the command or file, then open the full guide only if you need deeper rollout detail.

Browse all deployment guides

GitHub Actions

GitHub Actions workflow

Drop one workflow into the repository and run Trivy, Semgrep, TruffleHog, and Syft in parallel.

.github/workflows/security-scan.yml

bash

bash <(curl -fsSL https://stg-blackshield.chaplau.com/source-bundles/github-security-scan.sh)

Download source 阅读指南

GitLab CI

GitLab CI pipeline

Add one security stage that scans merge requests, default-branch builds, and scheduled pipelines.

.gitlab-ci.yml

bash

bash <(curl -fsSL https://stg-blackshield.chaplau.com/source-bundles/gitlab-ci.sh)

Download source 阅读指南

GitHub Deploy Gate

GitHub Actions deploy gate

Drop in one workflow that evaluates the hosted Rego decision API before production deploys and prints the reasons inline.

.github/workflows/deploy-guardrails.yml

bash

bash <(curl -fsSL https://stg-blackshield.chaplau.com/source-bundles/github-policy-guardrails.sh)

Download source 阅读指南

GitLab Deploy Gate

GitLab deploy gate job

Add one reusable deploy job that checks allow, warn, or deny outcomes against your tenant policy pack before release.

.gitlab/deploy-guardrails.yml

bash

bash <(curl -fsSL https://stg-blackshield.chaplau.com/source-bundles/gitlab-policy-guardrails.sh)

Download source 阅读指南

AWS Lambda

AWS cloud scanner source

Bootstrap the AWS CDK project locally, then deploy the tenant-owned cloud posture scanner without rewriting the commands.

deploy/aws-cloud-scanner/

bash

bash <(curl -fsSL https://stg-blackshield.chaplau.com/source-bundles/aws-cloud-scanner.sh)
cd deploy/aws-cloud-scanner

Download source 阅读指南

GCP Cloud Run

GCP cloud scanner source

Bootstrap the Terraform module locally, then deploy the cloud scanner to your target projects and regions with the same commands shown in the guide.

deploy/gcp-cloud-scanner/

bash

bash <(curl -fsSL https://stg-blackshield.chaplau.com/source-bundles/gcp-cloud-scanner.sh)
cd deploy/gcp-cloud-scanner

Download source 阅读指南

Kubernetes

Helm chart source

Pull the Helm chart source locally, review the templates, and install the cluster scanner from your own repository.

deploy/helm/secplatform-k8s-scanner/

bash

bash <(curl -fsSL https://stg-blackshield.chaplau.com/source-bundles/k8s-scanner-helm.sh)
cd deploy/helm/secplatform-k8s-scanner

Download source 阅读指南

SaaS on AWS

AWS SaaS scanner source

Bootstrap the AWS CDK project locally, then deploy the tenant-owned Lambda scanner without rewriting the commands.

deploy/aws-saas-scanner/

bash

bash <(curl -fsSL https://stg-blackshield.chaplau.com/source-bundles/aws-saas-scanner.sh)
cd deploy/aws-saas-scanner

Download source 阅读指南

SaaS on GCP

GCP SaaS scanner source

Bootstrap the Terraform module locally, then deploy the Cloud Run Job scanner with the same commands shown in the guide.

deploy/gcp-saas-scanner/

bash

bash <(curl -fsSL https://stg-blackshield.chaplau.com/source-bundles/gcp-saas-scanner.sh)
cd deploy/gcp-saas-scanner

Download source 阅读指南

指南合集

从这里开始

Fastest path from account creation to first validated findings.

首批发现生命周期

Run scans, triage risk, and build a repeatable remediation workflow.

信任与治理

Copy-paste-ready deployment guides for every scanner type — CI/CD pipelines, cloud posture, Kubernetes, SaaS OAuth, and host intrusion detection.

可靠性与支持

Buyer-facing proof of how BlackShield handles access control, evidence, data rights, control coverage, and offboarding in the actual product.

Reliability and Support

Understand availability commitments, incident flow, continuity planning, and troubleshooting.

15-20分钟

完成工作区开通

创建您的工作区、第一管理员和集成密钥，以便您的团队可以开始安全地获取结果。

受众: 工作空间所有者和第一租户管理员

阅读指南

30-45分钟

登录后：首日下一步

使用此第一天清单从空工作区转移到经过验证的结果和明确的所有权。

受众: 新租户管理员和安全主管

阅读指南

10-15分钟

导入首批发现

在扩展到更多集成之前，运行首次扫描、提交结果并确认数据质量。

受众: 安全工程师、CI所有者和集成工程师

阅读指南

建议进行持续每日审查

审查并确定发现优先级

使用风险、可利用性和所有权来确定修复的优先级，以便团队首先修复重要的问题。

受众: 安全分类团队、工程主管和服务所有者

阅读指南

前 30天

首批发现后的后续工作

将初步发现转化为具有明确指标、所有权和报告的可重复安全计划。

受众: 安全程序所有者和工程经理

阅读指南

2 minutes

Deploy the Pipeline Scanner

Embed Trivy, Semgrep, TruffleHog, and Syft into every commit with a single workflow file. Works with GitHub Actions, GitLab CI, and Bitbucket Pipelines.

受众: DevOps engineers, platform engineers, and security engineers

阅读指南

3 minutes

Gate Deploys with Hosted Rego Guardrails

Add a lightweight CI step that sends deploy context to your tenant and gets an allow, warn, or deny decision back without self-hosting OPA.

受众: Platform engineers, release managers, and security engineers

阅读指南

5 minutes

Deploy the Cloud Scanner on AWS

Scan your AWS environment for misconfigurations with Prowler, deployed as a Lambda container on EventBridge Scheduler — no EC2, no always-on compute.

受众: Cloud engineers, security engineers, platform teams

阅读指南

5 minutes

Deploy the Cloud Scanner on GCP

Scan GCP project posture with Prowler via a serverless Cloud Run Job triggered by Cloud Scheduler. One Terraform apply deploys to any number of projects and regions.

受众: Cloud engineers, security engineers, platform teams

阅读指南

2 minutes

Deploy the Kubernetes Scanner

Scan cluster posture with kube-bench (CIS benchmarks), kubescape, and Kyverno policy telemetry. One Helm chart install, one kubectl secret — done.

受众: Platform engineers, Kubernetes administrators, security engineers

阅读指南

5 minutes

Deploy the SaaS Scanner

Discover over-privileged OAuth grants, stale app access, and shadow AI tool sprawl across Google Workspace, Microsoft 365, and GitHub. Runs entirely inside your tenant boundary.

受众: Security engineers, identity and access management teams, platform engineers

阅读指南

3 minutes

Deploy the VM and Host Scanner

Ingest OSSEC and Wazuh host intrusion detection alerts into the platform for correlation with cloud and container findings. Works with Docker Compose, systemd, or ECS Fargate.

受众: Security operations teams, infrastructure engineers

阅读指南

10-15分钟