Authentication & Security

SSO via Keycloak

Authentication is handled entirely through Keycloak SSO:

• Users authenticate at the Sypha Portal; auth state carries over to the Syphax dashboard automatically
• No separate credentials to manage in Syphax
• Token refresh and revocation handled transparently
• Session invalidated server-side on logout — tokens cannot be reused

Scan Isolation

• Each scan runs in its own Docker container with full network isolation
• Containers are destroyed after the scan completes
• No shared state between scans or users
• Reports are access-controlled by user identity — only the initiating user can access their scan results

Integrations