Hardware & System
Requirements
Minimum and recommended specifications for deploying SpiderIQ on-premise, in a private cloud, or on a managed VPS — across all three plan tiers.
Min CPU
4 vCPUs
Starter tier
Min RAM
8 GB
DDR4 required
Min Storage
50 GB SSD
NVMe recommended
Min Network
100 Mbps
Outbound unrestricted
Hardware Specifications
Minimum specs allow the platform to run; recommended specs ensure optimal scan throughput and report generation speed.
Recommended Cloud Instances
Tested and validated instance types across the three major cloud providers.
Network Requirements
Outbound HTTPS (443)requiredRequired for NVD CVE feeds, OSINT sources (crt.sh, c99.nl), and threat intelligence APIs
Outbound DNS (53 UDP/TCP)requiredSubdomain brute-force and DNS resolution across all scan modules
Outbound HTTP (80)requiredHTTP probe module and redirect chain analysis
Inbound HTTPS (443)requiredWeb dashboard access and REST API endpoint
Outbound SMTP (587)requiredEmail notification delivery via TLS
Outbound TCP (1–65535)recommendedFull port scan coverage for IP Analysis module
Inbound SSH (22)optionalAdministrative access — restrict to management IPs only
Outbound NTP (123 UDP)recommendedTime synchronisation for accurate scan timestamps
Software Requirements
Runtime
- Node.js 20 LTS (minimum 18 LTS)
- npm 10+
- Python 3.11+ (optional, for extended OSINT modules)
Database
- PostgreSQL 15+ (production)
- SQLite 3.40+ (development / Starter)
- Redis 7+ (session store & job queue)
Web Server
- Nginx 1.24+ (reverse proxy / TLS termination)
- Certbot / Let's Encrypt (TLS certificates)
- PM2 or systemd (process management)
Security
- OpenSSL 3.0+
- fail2ban (brute-force protection)
- UFW or iptables (host firewall)
Containerised (optional)
- Docker 24+
- Docker Compose 2.20+
- Kubernetes 1.28+ (Enterprise HA deployments)
Important Notes
All specifications assume dedicated resources. Shared hosting or burstable instances (e.g. AWS t3 burst credits) may cause scan timeouts under sustained load.
Subdomain discovery and full port scans generate significant outbound traffic. Ensure your hosting provider permits security scanning from your IP range, or whitelist your scanner IP with target organisations.
For on-premise Enterprise deployments, SpiderIQ supports air-gapped environments with offline CVE database sync. Contact info@spidergadget.io for the offline deployment guide.
SSD storage is mandatory. Spinning-disk HDDs will cause severe performance degradation in the scan result database and report generation pipeline.
Need a Custom Deployment?
Our team can help size your infrastructure, design an HA architecture, or provide an air-gapped deployment package for classified environments.