Security Testing for JS Apps, Node Congress
summary
Claims automated security scans run on PR or commit in CI/CD, finds vulnerabilities early and supports server HTML SPAs REST and GraphQL, and is built on ZAP (zaproxy.org). The product produces the exact request and response with a highlighted proof and a validate button to replay and debug, plus triage features that mark risk accepted or push issues into Jira so future scans ignore known items. Free accounts and a conference giveaway are mentioned.
AI-written summary · about
chapters (4)
- 0:00Start
- 1:58built on top of an open source scanner
- 2:29automated application security testing
- 3:33stackhark integrates really easily with the rest of your engineering stack
related talks
45mSecurity Testing with OWASP ZAP in CI/CD
08mAutomated Security Testing for JS Apps
52mApplication Security at DevOps Speed and portfolio scale
58mOpen Source Pentesting and Security Analysis Tools: the DevOps way
35mAutomated Security Testing
45mAutomated Security Testing in a DevOps world
01h 01mOpen Source Pentesting and Security Analysis Tools: the DevOps way… #slideless
46mSecurity DevOps - Staying Secure In Agile Projects