Automated Application Security Testing
summary
Claims a dynamic scanner that tests running HTTP apps and REST/GraphQL/SOAP APIs, integrates in CI/CD and runs via docker run stackhawk against local or CI-hosted services. Scans average under 10 minutes, configuration lives with the code as yaml that lives with the code (stackhawk ammo). Finds concrete issues like SQL injection and XSS, gives curl to replay attacks, pushes triaged findings to Jira or CI (optionally breaking builds) and remembers triage so noise is reduced.
AI-written summary · about
related talks
09mAutomated Application Security Testing
09mAutomated Application Security Testing with StackHawk
09mAutomated Application Security Testing
09mAutomated Application Security Testing with StackHawk
08mAutomated Security Testing for JS Apps & Underlying APIs
15mDev-first API and application security testing
09mAutomated Application Security Testing
07mSecurity Testing for GraphQL Backed Applications