Modern GraphQL API Security Testing
summary
Claim: StackHawk DAST drives GraphQL APIs directly using GraphQL introspection, runs locally or in CI via Docker/Java, and uses real or Faker data to exercise microservices before production. It reports reproducible curl examples, flags OWASP API issues like custom tests for broken access control and insecure direct object references, and aims for faster, more accurate scans with fewer false positives compared to legacy front-end-driven scanners.
AI-written summary · about
chapters (4)
related talks
09mHow to Make GraphQL Security Easier with StackHawk
07mSecurity Testing for GraphQL Backed Applications
09mAutomated Application Security Testing with StackHawk
15mDev-first API and application security testing
09mAutomated Application Security Testing
09mAutomated Application Security Testing
08mAutomated Security Testing for JS Apps & Underlying APIs
09mAutomated Application Security Testing with StackHawk