All Categories Cosmog Configuration Security testing web applications in your internal network using Beagle Security Cosmog (Kubernetes)

Security testing web applications in your internal network using Beagle Security Cosmog (Kubernetes)

By Nandagopal S
September 17, 2025

Method 1: 

  1. Click the Tunneling button above the application list in the application dashboard.  

  1. This opens the Cosmog configuration side panel.   

  1. Click on Create new profile button.  

  2. You can use either "Standard platforms" or "Kubernetes". (Steps for Kubernetes listed after this section)

  3. In "Standard platform", by default, the port will be selected as 80 if you've selected "http".

  4. When you're creating a new application, under the "Application URL accessibility" section, turn on the "This URL is only accessible within my local network and is not available publicly" toggle button.

  5. From the drop-down list, select the Cosmog profile you've created.

 

Method 2:  

  1. Create a new application 

  1. After providing application details, turn on “This URL is only accessible within my local network and is not available publicly” radio button. 

  1. You can select or add a new Cosmog profile here. 

  2. To create a new Cosmog profile click on the "Add new" button.

  3. You can use either "Standard platforms" or "Kubernetes". (Steps for Kubernetes listed after this section)

  4. In "Standard platform", by default, the port will be selected as 80 if you've selected "http".

Kubernetes Integration for Tunnelling (Cosmog)

  1. Select Kubernetes from the two available options.

  2. Provide the necessary information

  3. Click Save. Your profile will now be created.

  4. From the created profile, click the Install button.

  5. Copy the command shown in the pop-up box and run it in your Kubernetes environment.

  6. The Pod will be set up in the default namespace (unless you specify otherwise).

  7. You are now ready to start the test.

  8. Once the test begins, the Cosmog server will start automatically.

  9. The Cosmog client will connect to the server created from step 7.

Namespace: A Kubernetes namespace is a way to logically group and isolate resources within a cluster (e.g., dev, staging, prod).

Cluster domain: This is the DNS domain name for your Kubernetes cluster, usually ending with .svc.cluster.local, which ensures services can discover and communicate with each other.

Bridge IP address: A distinct IP address that must be assigned to the Cosmog client. Please make sure that the IP address is not already assigned to any internal device or system.   

Test IP range: The IP address/IP range of the application(s) that need to be security tested. It should be specified as a CIDR range.  

Read more: https://www.geeksforgeeks.org/classless-inter-domain-routing-cidr/ 

Understanding the errors that may occur when you start a test 

 Certain errors may occur when you initiate a test if your Cosmog profile or client is not set up correctly. Understanding the following conditions can help you fix the issues when starting a test. 

 Condition 1 

 Cosmog Server Status: Down 

Cosmog Client Status: Down 

Web Application Status: Down 

 

This condition can occur due to any of the following reasons: 

  1. User did not click the Start Test button 

  1. User did not create a Cosmog profile which allocates an IP address to the Cosmog client 

  1. User must have deleted the created Cosmog profile 

     

Condition 2  

Cosmog Server Status: Up 

Cosmog Client Status: Down 

Web Application Status: Down 

 

This condition can occur due to any of the following reasons: 

  1. User did not install the Cosmog client 

  1. Cosmog client may not be running properly. In such a case, please get in touch with our support team 

 

Condition 3  

Cosmog Server Status: Up 

Cosmog Client Status: Up 

Web Application Status: Down 

This condition can occur when Beagle Security is not able to access the user’s application.  

Was this article helpful?

Thanks for your feedback!