How It Works

XCG is a collaborative creation of GovTech’s Cyber Security Group (CSG) and A*STAR’s Institute for Infocomm Research, designed to mitigate the risks associated with insecure code through a secure-by-default framework. It enhances web application security by reducing or eliminating insecure behaviors within applications.

Built on the Django framework, a high-level Python web framework that promotes rapid development, XCG allows developers to concentrate on application creation without the burden of common development challenges.

The framework consists of various independent Django modules that modify Django’s behavior to address specific security vulnerabilities. Each module protects the application from particular types of threats, requiring minimal configuration or changes to the existing application.

Developers can easily integrate XCG modules into their current Django web applications or utilise XCG starter kits to create new applications from scratch.