Install and requirements
The hosted service needs no installation. On the Max plan, Secrook can also run on a Linux server you choose, inside your network or in your own cloud. The install guide comes with your licence.
Server requirements
| Operating system | A current Linux distribution (Ubuntu 22.04 or later, Debian 12 or later, or similar) |
|---|---|
| Resources (recommended) | 2 CPU cores, 4 GB memory, 20 GB disk |
| Database | PostgreSQL, a current version |
| An SMTP relay that accepts mail from the server | |
| Users | Local accounts. Active Directory sign-in on the Max plan |
Steps
Get your licence key
You receive the key and the install guide by email after the trial or the invoice.
Prepare the server
Create a PostgreSQL database and a service account, and allow the outbound access listed above.
Run the installer
Run the install script from the guide. It sets up the application and starts it as a service.
Enter the key and add your products
Open the address in a browser, enter the key once, and list the products you run.
Set teams and addresses
Create the teams, assign products to them and send a test email.
Network access
The server needs outbound HTTPS only. Nothing needs to reach the server from the internet, because staff open it from the internal network.
| Destination | Used for |
|---|---|
| services.nvd.nist.gov | Vulnerability data (NVD) |
| www.cisa.gov | Known exploited vulnerabilities |
| api.first.org | Exploitation likelihood (EPSS) |
| vulnerability.circl.lu | Additional vulnerability data |
| Your licence address | Daily licence check. Sent with your licence key, an installation ID and the version only |
| Your mail server | Alert emails |
Need help?
Pro includes one 60-minute remote session. Max includes an assisted install and a quarterly review.