Automated Security Testing for JS Apps & Underlying APIs
summary
StackHawk is a docker-based scanner that runs against a live host (localhost or CI) and claims to find real issues like cross-site scripting and SQL injection in server-rendered pages, SPAs, REST (OpenAPI) and GraphQL apps. Scans produce request/response pairs, a curl recreation to repro attacks, CVSS-like severity and a Jira push so fixes link back to evidence. Configuration lives with code, the scanner can break the build on configured severities, and it can split tests by microservice for faster, lower-false-positive scans.
AI-written summary · about
related talks
09mAutomated Application Security Testing with StackHawk
09mAutomated Application Security Testing
09mAutomated Application Security Testing
09mAutomated Application Security Testing
09mAutomated Application Security Testing with StackHawk
15mDev-first API and application security testing
07mSecurity Testing for GraphQL Backed Applications
09mHow to Make GraphQL Security Easier with StackHawk