newrelic

Csec Java Agent

Name: Csec Java Agent
Author: newrelic

Security community

SOURCE https://github.com/newrelic/csec-java-agent

Description

Open source repo for the new relic Java security agent

Installation

This entry records only its repository, not the path inside it, so there is no exact command to give. Open the source below and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

README

New Relic Security Agent for Java

**Repo:** [https://github.com/newrelic/csec-java-agent](https://github.com/newrelic/csec-java-agent)

**Artifact Name:** newrelic-security-agent.jar

The IAST capability should only be used in pre-production environments and never in production.

The New Relic Security Agent enables instrumentation of a Java application for Interactive Application Security Testing(IAST) and exposes exploitable vulnerabilities.

Installation

This project is built and published as a dependency for use in [newrelic-java-agent](https://github.com/newrelic/newrelic-java-agent) only. Hence this can not be used directly. Typically, most users use the version auto-installed by the APM agent. You can see agent install instructions [here](https://docs.newrelic.com/docs/iast/install/).

Supported Java Versions

Java version 8 and above

Support Matrix

Frameworks and libraries

The agent automatically instruments the following frameworks.

JAX-RS 1.0 to latest
Spring Boot 1.4 to latest
Struts 2.0.5 to latest
Log4j from 2.0 to 2.20.0
Servlet from 2.4 to latest
Spring from 0 to latest
Sun Net HTTP Server
Glassfish 3.0 to latest
Resin 3.1.9 to 4.0.x
Jetty 9.3.0.M1 to latest
Mule ESB 3.6 to 3.9.x
gRPC 1.4.0 to latest **
Jersey 2.0 to latest
Akka Server 10.0 to latest (with scala 2.11 and above)
Spray Can 1.3.1 to latest (with scala 2.11 and above)
Akka HTTP Server 10.0 to latest (with scala 2.11 and above)
Spray HTTP 1.3.1 to latest (with scala 2.11 and above)
Netty Server 4.0.0.Final to latest
Netty Reactor Server 0.7.0.RELEASE to latest
Vertx web 3.2.0 to latest
GraphQL 16.0.0 to latest **

gRPC Instrumentation

IAST for **gRPC** requires the dependency [protobuf-java-util](https://mvnrepository.com/artifact/com.google.protobuf/protobuf-java-util) for IAST request replay.