Articles on: Cosmog configuration

Security testing web applications in your internal network using Beagle Security Cosmog (Standard platforms)

Cosmog setup: Standard platform setup

This guide helps you set up Cosmog for applications running on:


  • Virtual machines (VMs).


  • Bare metal systems.


  • Not kubernetes.

Specific prerequisites for standard platforms

Docker installation

Docker should be installed and properly configured on the system.


Note: If Docker is not already installed, the Cosmog installation command will automatically handle the setup.

User permissions

Root or administrative privileges are required to perform the installation and setup.

Step 1: Creating a Cosmog profile

Currently, the Cosmog client has to be installed as a Docker container. You’ll have to configure a Cosmog profile to get started.


Method 1: From the tunneling section


  • Click on **Tunneling, **located in the application dashboard.


  • This will open up the Cosmog configuration side panel.


  • Click on Create new profile.


  • Select Standard platforms.


  • In the Bridge IP address tab, choose a bridge IP address from the provided IP ranges. (**Note: **Make sure the bridge IP address does not overlap with the test IP range.)


  • Fill in the IP address or range of the application you want to test in the Test IP range column.


Method 2: While creating an application.

  • Create a new application.


  • Enter the application details.


  • Enable: ‘This URL is only accessible within my local network and is not available publicly.’


  • Select an existing Cosmog profile or click Add new.


  • Choose Standard platforms.


  • Click Save to complete setup.

Profile configuration

While creating the profile, you’ll need to provide:


Bridge IP

The Bridge IP is used to route traffic from Beagle Security’s test engine to your internal network through the secure tunnel.


  • Choose an IP address from the provided IP ranges.


  • Make sure it does not overlap with the test IP range.


Test IP Range

The IP address or range of applications you want to test. It must be provided in CIDR format (example: 192.168.1.0/24).

Step 2: Install Cosmog client

Follow these steps to install the Cosmog client inside your internal network:


  • Open your Cosmog profile from the Cosmog configuration panel.
  • Click on Install.
  • In the pop-up:
    • Select your platform.
    • Select the installation type. 


Example

  • Ubuntu / Mint → choose Debian.
  • Red Hat / Fedora → choose CentOs.
  • Copy the installation command.
  • Run the command on your host machine.
Note: What does this command do?

-> It is a binary script that runs the Cosmog client as a Docker container

-> It will install Docker automatically if it is not already installed

-> It does not require Docker Compose or any manual setup

-> It starts the Cosmog client and establishes the secure tunnel


After installation and while running Cosmog, you’ll get these commands

  • **Cosmog Start **→ Starts the secure tunnel.


  • **Cosmog Stop **→ Stops the tunnel.


  • **Cosmog Status **→ Checks the tunnel status.


Run **Cosmog Start **to begin testing.


What happens next?

  • The Cosmog Client connects to Beagle Security.
  • The connection is verified.
  • Once connected, Beagle Security starts the security test.
  • All traffic flows securely through the tunnel.

Scan limits

The number of scans you can run at the same time depends on your plan. For example, some plans allow up to 5 concurrent scans.


Each scan sends traffic through your network. Running multiple scans can increase bandwidth usage and this may affect performance depending on your network capacity.


So the recommendation is to plan scans based on your available network resources and avoid running multiple scans at the same time.

Troubleshooting

If the tunnel fails to connect:


  • **Check UDP: **Verify that your firewall allows UDP.


  • Check DNS: Ensure the container can resolve external domains.

Error handling

Certain errors may occur when you initiate a test if your Cosmog profile or client is not set up correctly. Understanding the following conditions can help you fix the issues when starting a test.

You can check the status of your setup on your Beagle Security dashboard.


Go to:

Dashboard → Application → select that current internal app → testing → tunneling

Case 1: Everything is down

  • Cosmog Server status: Down
  • Cosmog Client status: Down
  • Application status: Down


Possible reasons

  • The security test was not started.
  • Cosmog profile was not created.
  • Profile was deleted.


What to do

  • Start the test
  • Create or recreate the Cosmog profile

Case 2: Client Not Running

  • Cosmog Server status: Up
  • Cosmog Client status: Down
  • Application status: Down


Possible reasons

  • Cosmog client is not installed.
  • Cosmog client is not running properly. In such a case, please get in touch with our support team.


What to do

  • Run the installation command again.
  • Start the client using Cosmog Start.
  • If the issue continues, contact support.

Case 3: Application Not Reachable

  • Cosmog Server status: Up
  • Cosmog Client status: Up
  • Application status: Down


Possible reason

  • Beagle Security cannot access your application.


What to do

  • Check the configured IP range.
  • Make sure the application is running.
  • Verify it is accessible within your internal network.

Updated on: 06/05/2026

Was this article helpful?

Share your feedback

Cancel

Thank you!