Getting Started
GraphNode is an enterprise static application security testing (SAST) platform that performs deep data flow analysis across your source code to detect vulnerabilities before they reach production.
Platform Overview
GraphNode provides comprehensive application security through two core modules: SAST (Static Application Security Testing) for source code analysis, and SCA (Software Composition Analysis) for third-party dependency vulnerability detection.
SAST Engine
Deep data flow and taint analysis across 13+ languages with 780+ built-in security rules. Tracks vulnerability propagation from source to sink.
SCA Module
Scans third-party libraries and transitive dependencies for known CVEs. Provides license compliance tracking and upgrade recommendations.
Key Capabilities
Architecture
GraphNode uses a distributed architecture where the web application manages projects, users, and results, while one or more scan engines perform the actual code analysis. Engines can be deployed across multiple machines for parallel scanning.
System Requirements
GraphNode requires 2 dedicated Windows Servers. Both servers must be able to reach each other on the network without blocking or filtering.
Supported Operating Systems
Server 1: GraphNode Enterprise Portal (UI)
| OS | Windows Server 2012 R2 (SP1), 2016, 2019, or 2022 |
| CPU | Intel Core i5, i7 or i9 (or benchmark equivalent) |
| RAM | 16 GB or more |
| Disk Space (C:) | 250 GB or more |
Server 2: GraphNode Scan Server (Engine)
| OS | Windows Server 2012 R2 (SP1), 2016, 2019, or 2022 |
| CPU | Intel Core i5, i7 or i9 (or benchmark equivalent) |
| RAM | 32 GB or more |
| Disk Space (C:) | 500 GB or more |
Network & Virtualization
| Network | Both servers must be able to reach each other without blocking/filtering |
| Internet | 1 Mbps+ connection needed during installation only; can be disconnected after |
| Virtualization | VMware vSphere and Hyper-V virtual server solutions are supported |
Software Requirements
The following software is installed by the GraphNode team during deployment:
Quick Start
Follow these steps to run your first security scan with GraphNode.
Log in and create a project
Navigate to your GraphNode instance and log in with your credentials. Go to Projects and click New Project.
Choose your scan type
Select how you want to provide source code: upload a ZIP archive for local scanning, or connect a repository (GitHub, GitLab, Azure DevOps, Bitbucket, or SVN) for automated scanning.
Local Scan
Upload ZIP archive
Repository Scan
GitHub, GitLab, Azure DevOps, Bitbucket, SVN
Configure and run the scan
Set file/folder exclusions if needed, optionally configure a scan schedule, then click Start Scan. The engine will analyze your code and report results to the dashboard.
Review findings in the Audit module
Once the scan completes, navigate to the Audit module to review detected vulnerabilities. Use data flow visualization to understand how tainted data propagates from source to sink, and triage findings as Exploitable, False Positive, or Suppressed.