Veertu: A Dev-Sec-Ops Platform Built for iOS and macOS CI/CD

Veertu is a platform dedicated to delivering continuous integration and continuous delivery (CI/CD) solutions tailored specifically for iOS and macOS applications. Its core mission is to help organizations build secure, scalable, and efficient virtualized macOS environments—particularly on hardware powered by Apple Silicon and Intel chips.

Core Products and Features

The Veertu platform comprises several key products that together form a comprehensive Dev-Sec-Ops workflow:

1. Anka

Function: macOS virtual machine management and orchestration engine.

• Environment Provisioning: Enables creation, management, and execution of macOS virtual machines on both Intel and Apple Silicon Macs for iOS CI/CD pipelines.
• Full Automation & Scalability: Supports building fully automated, on-demand scalable virtualized macOS environments for testing and building.
• Flexible Deployment: Can be deployed and run on-premise, on managed hosts, or on AWS EC2 Mac instances.

2. Anka Scan

Function: Specialized security scanning tool for Anka macOS virtual machine images.

• Image Security Auditing: Scans macOS VM templates stored in the Anka Registry.
• Dependency Vulnerability Detection: Proactively identifies insecure third-party packages and dependencies (i.e., known CVEs — Common Vulnerabilities and Exposures) within the VM images.
• Continuous Security Assurance: Establishes ongoing software security assurance within the iOS CI/CD pipeline.

3. Mac Scan

Function: Real-time, cross-environment package security scanner.

• Real-Time Scanning: Scans for known CVE vulnerabilities during package downloads, dependency installations, or environment changes.
• Broad Environment Support: Operates on physical Macs, macOS virtual machines, and AWS EC2 Mac instances.
• Seamless Integration: Easily integrates into existing iOS CI build and test workflows.

4. EC2 Mac AMI Scan

Function: Security scanning tool specifically designed for AWS EC2 Mac AMIs (claimed as the world’s first).

• No Instance Launch Required: Performs CVE scanning directly on Amazon Machine Images (AMIs) without needing to launch an EC2 Mac instance.
• Deep Scanning: Continuously evaluates the security posture of third-party software packages and dependencies within the AMI.

Platform Advantages

• Unified, End-to-End Management: Offers a single platform for virtual machine orchestration (Anka) and end-to-end security scanning (Anka Scan, Mac Scan, EC2 Mac AMI Scan), delivering a complete macOS CI/CD and security solution.
• Excellent Hardware Compatibility: Fully supports both Intel and Apple Silicon architectures, ensuring seamless technology continuity during Apple’s chip transition and beyond.
• Strong Security Focus: Implements shift-left security by detecting vulnerabilities early in the CI/CD pipeline—during image building or package installation—instead of only after deployment.
• Flexible Deployment Options: Supports hybrid and multi-cloud strategies, allowing users to run their CI/CD environments on-premise, via managed services, or on AWS EC2 Mac, optimizing cost and performance.
• Enhanced DevOps Efficiency: Enables rapid provisioning and disposal of ephemeral macOS VMs, significantly improving parallelism and resource utilization for build and test tasks, thereby accelerating development cycles.
• Enterprise-Grade: Adopted by leading app publishers, mobile game developers, large enterprises, and independent software vendors, demonstrating proven capability to handle complex, large-scale CI/CD workloads.

Conclusion

Veertu directly addresses two critical challenges faced by macOS/iOS developers in CI/CD environments: rapid access to clean, consistent macOS build environments and ensuring software supply chain security. By deeply integrating lightweight virtualization with proactive security scanning, Veertu provides a powerful, reliable, and secure modern DevOps platform for enterprise mobile and application development teams. Whether managing on-premise Mac clusters or leveraging AWS EC2 Mac instances in the cloud, Veertu empowers teams to achieve faster, safer software delivery.