Get started
Most customers use the hosted service: nothing to install, nothing to maintain. Enterprises on the Max plan can also run Secrook on their own Linux server.
Hosted service
Your private workspace runs on our servers. There is nothing to install and no server to look after. You only need a web browser.
Start a trial
Fill in the short form. No card is needed.
Sign in
Your address and a one-time password arrive by e-mail in about a minute.
Add your software
Pick the products you run. Alerts start with the first scan.
On your own server (Max plan, enterprises)
Run Secrook on a Linux server you choose, inside your network or in your own cloud. Your vulnerability data never leaves your environment. The install guide and a licence key come with the Max plan.
Server requirements
| Operating system | A current Linux distribution (Ubuntu 22.04 or later, Debian 12 or later, or similar) |
|---|---|
| Resources (recommended) | 2 CPU cores, 4 GB memory, 20 GB disk |
| Database | PostgreSQL, a current version |
| An SMTP relay that accepts mail from the server | |
| Users | Local accounts. Active Directory sign-in on the Max plan |
Steps
Get your licence key
You receive the key and the install guide by e-mail when you start your Max plan.
Prepare the server
Create a PostgreSQL database and a service account, and allow the outbound access listed above.
Run the installer
Run the install script from the guide. It sets up the application and starts it as a service.
Enter the key and add your products
Open the address in a browser, enter the key once, and list the products you run.
Set teams and addresses
Create the teams, assign products to them and send a test email.
Network access
The server needs outbound HTTPS only. Nothing needs to reach the server from the internet, because staff open it from the internal network.
| Destination | Used for |
|---|---|
| services.nvd.nist.gov | Vulnerability data (NVD) |
| www.cisa.gov | Known exploited vulnerabilities |
| api.first.org | Exploitation likelihood (EPSS) |
| vulnerability.circl.lu | Additional vulnerability data |
| Your licence address | Daily licence check. Sent with your licence key, an installation ID and the version only |
| Your mail server | Alert emails |
Need help?
Pro includes one 60-minute remote session. Max includes an assisted install and a quarterly review.