~/talk

Automated Application Security Testing

Talkat JSNation Conference 2022 · 2022-06-16..06-20· [security, devops-and-delivery]

Claims an automated dynamic application scanner that runs against live HTTP apps and APIs and reliably finds real bugs — demo surfaces SQL injection and cross‑site scripting and shows fixes. Scanner sits close to the app, runs in Docker, integrates into CI/CD and Jira, is configured by yaml with code and can use OpenAPI/GraphQL specs. Scans average under 10 minutes, produce replayable curl replay commands and triage status so issues can break a build or be deferred.

AI-written summary · about

  1. 0:00Start
  2. 0:48Stackhawk
  3. 1:23How Does Stackhawk Work
  4. 3:45Running the Stackhawk Scanner
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.