Automated Application Security Testing with StackHawk
summary
StackHawk claims fast, automated dynamic testing of running HTTP APIs (REST, GraphQL, SOAP) by running a Docker scanner close to the app and using OpenAPI/GraphQL introspection to drive attacks; typical scans scan finish ~10 minutes and surface concrete bugs like SQL injection and XSS with request/response details and a replay attack with curl command. Configuration lives with code (configured via stackhawk.yaml), output can integrates with CI/CD and Jira and optionally fail builds.
AI-written summary · about
related talks
09mAutomated Application Security Testing with StackHawk
09mAutomated Application Security Testing
09mAutomated Application Security Testing
09mAutomated Application Security Testing
08mAutomated Security Testing for JS Apps & Underlying APIs
15mDev-first API and application security testing
07mSecurity Testing for GraphQL Backed Applications
09mHow to Make GraphQL Security Easier with StackHawk